nextcatalog.whitworth.edu

Issued by GlobalSign RSA DV SSL CA 2018

About this certificate

This digital certificate with serial number 4f:6a:bf:b0:9f:9e:3f:04:ae:4f:1d:aa was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nextcatalog.whitworth.edu,OU=Domain Control Validated,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:6a:bf:b0:9f:9e:3f:04:ae:4f:1d:aa
Serial Number (int): 24578367142892295984581123498
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 64:1a:0d:8b:6d:a9:b3:41:0d:8f:16:95:cf:59:28:a2:3e:74:0a:b5
AuthorityKeyId: 81:80:d6:28:79:35:4a:5b:79:35:89:39:8f:12:17:6e:11:7b:2c:11

Fingerprint (sha1): 58:b5:6e:ca:c1:07:ae:4b:bf:84:4b:a9:4d:c0:27:91:a9:05:c2:0e
Fingerprint (sha256): 02:d4:3a:0e:59:a0:42:78:cd:62:7d:89:f4:b9:0e:8d:39:0a:7e:60:b1:a6:34:95:8d:e5:cd:bd:3d:28:0c:28

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsadvsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsadvsslca2018.crl

Check the revocation status for certificate nextcatalog.whitworth.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nextcatalog.whitworth.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nextcatalog.whitworth.edu

Other certificates including the domain name whitworth.edu

(limited to 100 certificates)
cluster3.technolutions.net
cluster3.technolutions.net
blackboard.whitworth.edu
cluster3.technolutions.net
apiprod.whitworth.edu
digitalcommons.whitworth.edu
nextcatalog.whitworth.edu
cluster3.technolutions.net
*.whitworth.edu
cluster3.technolutions.net
editcatalog.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
connect.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
connect.whitworth.edu
cluster3.technolutions.net
nextcatalog.whitworth.edu
cluster3.technolutions.net
digitalcommons.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
connect.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
digitalcommons.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
apiprod.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
clearpass.whitworth.edu
cluster3.technolutions.net
radius.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
serve.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
learn.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
libguides.whitworth.edu
us-east-1-san2.blackboard.com
us-east-1-san2.blackboard.com
cluster3.technolutions.net
connect.whitworth.edu
digitalcommons.whitworth.edu
*.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
ccm1-ms.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
www.whitworth.edu
serve.whitworth.edu
*.whitworth.edu
apply.whitworth.edu
cluster3.technolutions.net
news.whitworth.edu
cluster3.technolutions.net
mail.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
libguides.whitworth.edu
apply.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net

Certificate

The complete raw certificate details for nextcatalog.whitworth.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42MFhZxFTtzgH/kkgcmO
kwtMo38fyk11/Y4y0hCNj4RUxJMcCkRsxHvTpS/F1W3tfYmFeSKLyQW761mA95XL
FUsI8n07Jj52xqAk6B4+1+0Zq51i8KBkjv7wllhAK7pwdYRGvAYMLmPtt46cHnHY
PxUnHKdBwGECFNx5s7BCbDrYQQLkk7JwhXHkNm7d8elT5G/fWjY9sv5OspVh50Iv
R2wjInpey/dLAJjZtfa2lBl3PeiIIbhrkNk6MAvj7riN5wYzjn9ubvKbZERZ4hnM
UZuaGL3syStNbhxFGf7Z34d0gMPpO2O7E7asBQ/iwqzAM8tW2rRCPGqdyel8i5Gf
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24578367142892295984581123498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA DV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 19:05:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-20 19:22:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nextcatalog.whitworth.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28704924583349148041504373532347281490306285671948111954892541404257717014374273885478940123589068233033041645166977505121257781576325235252751675885561400574975407676614105481106383396753276432558749575425803260222203079854524884194495912260479132704456815160252875061628115647354979348782900742015321942426338391615033271753939149027263728863771179850641067553457039756104174962296354718191246241897886885724012142523512982208560661703542933134304698366954691753827163894769178901816872173947093595300996332303484744293884679673262822676812934551501979678488425780570652519784159375580627973061904814180969825279849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsadvsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsadvsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcatalog.whitworth.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8180d62879354a5b793589398f12176e117b2c11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							641a0d8b6da9b3410d8f1695cf5928a23e740ab5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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