*.barker.idm.oclc.org

Issued by OCLC TLS Issuing RSA SubCA R1

About this certificate

This digital certificate with serial number 44:f0:39:77:44:6c:bb:ba:fd:96:a6:fb:b4:dc:8f:60 was issued on by OCLC, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.barker.idm.oclc.org

OCLC, Inc.

Organization: OCLC, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 44:f0:39:77:44:6c:bb:ba:fd:96:a6:fb:b4:dc:8f:60
Serial Number (int): 91634820506097816519246052939018309472
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 20:98:fb:a1:f9:f3:06:85:f2:97:36:22:b4:80:f6:f5:a8:56:8a:30

Fingerprint (sha1): 18:c9:c3:bb:4d:41:07:a6:ca:bf:c9:67:d2:db:2a:61:7d:07:41:97
Fingerprint (sha256): 02:b7:06:00:f4:33:81:b5:4b:46:1d:a1:1c:a3:8d:38:40:4d:c9:e7:a3:66:b3:91:f9:5a:b6:36:29:a3:50:4a

Issuing Certificate URL: http://cert.ssl.com/OCLC-TLS-I-RSA-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/OCLC-TLS-I-RSA-R1.crl

Check the revocation status for certificate *.barker.idm.oclc.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.barker.idm.oclc.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.barker.idm.oclc.org
barker.idm.oclc.org

Other certificates including the domain name oclc.org

(limited to 100 certificates)
*.cfra-msa.idm.oclc.org
*.nwcc.idm.oclc.org
*.southseattle.idm.oclc.org
*.iuhu.idm.oclc.org
*.liuc.idm.oclc.org
*.cfra-msa.idm.oclc.org
deweyess.oclc.org
*.greatlibrary.idm.oclc.org
*.apll.idm.oclc.org
*.muhlenberg.idm.oclc.org
*.abington.idm.oclc.org
*.nccu.idm.oclc.org
secure06.stage.lithium.com
*.trevecca.idm.oclc.org
*.twu.idm.oclc.org
*.udlap.idm.oclc.org
*.aic.idm.oclc.org
*.weston.idm.oclc.org
*.cide.idm.oclc.org
*.bchs.idm.oclc.org
*.neomed.idm.oclc.org
*.uiwtx.idm.oclc.org
*.bpcc.idm.oclc.org
*.dartmouth.idm.oclc.org
*.tjportal.idm.oclc.org
*.wcc.idm.oclc.org
*.limcollege.idm.oclc.org
OWA.OCLC.ORG
*.victimresearch.idm.oclc.org
*.greenville.idm.oclc.org
*.dsc.idm.oclc.org
*.fmarion.idm.oclc.org
*.ubu-es.idm.oclc.org
exeter.idm.oclc.org
*.springerpub.idm.oclc.org
*.sanlib.idm.oclc.org
*.tjc.idm.oclc.org
*.zhejianglibr.idm.oclc.org
*.zulib.idm.oclc.org
*.burmanu.idm.oclc.org
*.ccl.idm.oclc.org
*.chifedkc.idm.oclc.org
workday.oclc.org
*.nscad.idm.oclc.org
*.confederation.idm.oclc.org
*.yccc.idm.oclc.org
*.aspenuniversity.idm.oclc.org
*.nu.idm.oclc.org
*.ala.idm.oclc.org
*.mmc.idm.oclc.org
*.akkon-onlinelibrary.idm.oclc.org
*.mclarenmacomb.idm.oclc.org
ftp-bibliotheca.de.oclc.org
*.jjhs.idm.oclc.org
*.gold.idm.oclc.org
*.qvcc.idm.oclc.org
*.omahalibrary.idm.oclc.org
*.nishogakusha-u.idm.oclc.org
*.usu29.idm.oclc.org
*.bakeru.idm.oclc.org
*.cdkc.idm.oclc.org
*.southeast.idm.oclc.org
*.lourdes.idm.oclc.org
*.mvcc.idm.oclc.org
*.fid-avl.idm.oclc.org
*.wcsu.idm.oclc.org
*.hchs.idm.oclc.org
*.aus.idm.oclc.org
*.kuyper.idm.oclc.org
*.testemea.idm.oclc.org
*.uea.idm.oclc.org
*.nnu.idm.oclc.org
*.sanfrancisco.idm.oclc.org
*.szrof.idm.oclc.org
*.fls.idm.oclc.org
*.sri.idm.oclc.org
*.sierranev.idm.oclc.org
*.ozarks.idm.oclc.org
deweyess.oclc.org
*.hodges.idm.oclc.org
*.ncat.idm.oclc.org
*.antioch.idm.oclc.org
*.trevecca.idm.oclc.org
*.wvclibrary.idm.oclc.org
Cmsauthor-ext.oclc.org
*.bucm.idm.oclc.org
*.drexel.idm.oclc.org
*.hshs.idm.oclc.org
*.arlis.idm.oclc.org
*.aaas.idm.oclc.org
*.esf.idm.oclc.org
*.uhsp.idm.oclc.org
*.essec.idm.oclc.org
*.scclosrios.idm.oclc.org
*.salusdental.idm.oclc.org
*.stmarys.idm.oclc.org
*.kl.idm.oclc.org
*.barker.idm.oclc.org
lbs-avans.oclc.org
*.nutn.idm.oclc.org

Certificate

The complete raw certificate details for *.barker.idm.oclc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 91634820506097816519246052939018309472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCLC, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCLC TLS Issuing RSA SubCA R1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 12:57:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-27 12:57:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.barker.idm.oclc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1023555559261054090859962261301108554634704284808373541697669855312591455502598190817435206351767436761658031430931147067283163627630311997846436699384198953120331688872731995753434785631191671871694930070790397012227449606721689675429916482744712221680541000544168698212667846639888711816534383466116095597672015936111049408658062514899808252041177320337123125341706690109868725872423158872623185846633767930628752027046732504971894314787128319859963901591929487177864682017133812711555036167259281560315608431764247958868930169007610832733607028834399695433245680913237436270356127899418781494346178626912145508031706061592350653595570173908825922267312219389160914927428336664169772614993023596076723688658243859315657863688825441419106095002435772551258951405944457658874636597670036677121497698558603016715751698597665388908211973414467100638713596008369574297821927568038160586330174672014816764491180150946023091818898651309217353970742859501252403141001163306627867475881529112182098259688095984535943115822412877237573899683556543806306740143545712722036793940820581138707287979748525872084998157931387680930272077456378560859795471701135501897217275138387487323672607788181107424281763556285381316109161261136644312526438139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2098fba1f9f30685f2973622b480f6f5a8568a30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/OCLC-TLS-I-RSA-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barker.idm.oclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barker.idm.oclc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/OCLC-TLS-I-RSA-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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