shop.usask.ca

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 6e:42:91:5c:e2:2a:7d:6e:9a:7b:a1:df:8a:58:de:c3 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=shop.usask.ca

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:42:91:5c:e2:2a:7d:6e:9a:7b:a1:df:8a:58:de:c3
Serial Number (int): 146560719437382504887563996002334072515
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 9c:68:72:0c:50:f0:f3:83:28:3b:c7:96:9d:0a:a1:81:84:4c:f1:33
Fingerprint (sha256): 04:4c:35:e3:8d:30:b4:0c:64:c7:d0:ec:54:53:9d:53:9c:d3:9b:ca:71:a7:96:19:09:55:3e:2a:93:03:14:97

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate shop.usask.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.usask.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.usask.ca

Other certificates including the domain name usask.ca

(limited to 100 certificates)
somtam.usask.ca
biglab.ca
asweb.usask.ca
cbme.usask.ca
ssrl.usask.ca
sesd.usask.ca
harvest-test.usask.ca
papyrus.usask.ca
booking.cs.usask.ca
static.huskies.usask.ca
drc.usask.ca
ccx1.usask.ca
svn.cs.usask.ca
medicine.usask.ca
moodle-hs.usask.ca
perspectiveppm.usask.ca
engr.usask.ca
cpassalestest.usask.ca
lib-ulc-test.usask.ca
*.test.usask.ca
booking.cs.usask.ca
iportal.usask.ca
intervac.usask.ca
eightball.usask.ca
moodle-hs.usask.ca
oemmw.usask.ca
exhibits.usask.ca
shop.usask.ca
excalibur.usask.ca
gwf-nutrient.usask.ca
m.working.usask.ca
dinewithustest.usask.ca
huskies.usask.ca
svn.cs.usask.ca
sesdweb.usask.ca
gisserver1.usask.ca
iportal.usask.ca
exhibits.usask.ca
winnowing.usask.ca
huskies.usask.ca
math.usask.ca
git.cs.usask.ca
candle.usask.ca
wcvm-hmicrv0.usask.ca
asportal.usask.ca
papyrus.usask.ca
xrm2018.usask.ca
gisserver1.usask.ca
libanswers.usask.ca
library.usask.ca
anita.usask.ca
shoptest.usask.ca
math.usask.ca
knowpulse.usask.ca
journals.usask.ca
chp3.usask.ca
mail.usask.ca
dsm.sess.usask.ca
www.edwards.usask.ca
sesdchannels.usask.ca
dinewithusdev.usask.ca
simcity.usask.ca
students.edwards.usask.ca
www.edwards.usask.ca
papyrus.usask.ca
borris.usask.ca
edx.engr.usask.ca
mytotalrewards.usask.ca
booking.cs.usask.ca
accusyn.usask.ca
*.cyber.usask.ca
borris.usask.ca
static.huskies.usask.ca
mydataplants.usask.ca
huskies.usask.ca
cst.cs.usask.ca
www.edwards.usask.ca
asweb.usask.ca
defiant.usask.ca
simcity.usask.ca
amigo.usask.ca
sksoilgis1.usask.ca
touch.usask.ca
touch.usask.ca
gis1test.usask.ca
ganita.usask.ca
journals.usask.ca
sundog.usask.ca
defiant.usask.ca
drc.usask.ca
medicine.usask.ca
gistest.usask.ca
winnowing.usask.ca
mytotalrewards-auth.usask.ca
asdev.usask.ca
moodle.cs.usask.ca
leadershipconference.usask.ca
static.huskies.usask.ca
shirpaccess.usask.ca
store.usask.ca

Certificate

The complete raw certificate details for shop.usask.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rVggigM75uCJMK+4wO1
o6Y6r3XHxNKDQ/7rhJ/DadS6ACr3rnYcZlfIZBthMyoW0ZHITy+YYBPHyZlHeHu8
n3hw/iHudNZry3G7nAgUprrTLAxjNRcnb2JYELdAdeSLl+QATWG9vwl/xBrv0R29
VpO8ZL2fBlm6DzavfS4mMxNIkCeLChcEvzvMmqGiCdKrDsVMVfMHFx9fhGWBUW/B
CGlxw5hXoe6MH7lhdo8Xy2YupF9nBRceYFYWq5LPOLpx1Yeer0prt7/uI1s7A13o
DOgt+k04xslWfioXkVOpfMSe8LPNu3cEalkS7tTHUnKQ0RYdwn8qsaikRvoImNXG
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 146560719437382504887563996002334072515
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'shop.usask.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27104437588034402167063823300424586195718630180626978355263300248787034723983434542060241121452470223694137166609544394035209356407150060687340491448320777568548509980932355421984666119466019581324986686470663302379758308215098090615114257556620493219699338138668307839702502727653663278297932775959036264726239552133128848883007194987169236456581993771315547096713276553127982112599595201670112763054764305684333976622275402142567965782788073114608351232642722193017924774924875166183956991145218597277688194878613936279311647526646614476067572399789442993894148548950502808876742829604932544418029833915202624931369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.usask.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015415ab26b00000040300473045022100f7c3b3ff1f9b907a559542eec0eaed22f50f164a4080bc1f6727f1844d3ed4d902203ce6d1bf82f21dc54456f0c69ed3356e39a0782db9d389e01cef98974ef458f3007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015415ab26de00000403004730450221008062d7d7d20f6cecfcfcab6ec1ed64b1f3ba4f3254104bb0045659055e38767f02203ef062890b4ba65d7b25d3e1078a704da8fbce15dfa80f44f00548504d3cb94f00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015415ab26c90000040300473045022100c6b96ad33f2cdd43b21583fe8a6951e550402db00c7e967eef3467039216eba702206e045b09c481ce4f0315c8da6fbf624caa0a8e13845754d4a2d0a9fb82cae10a007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015415ab26ee0000040300473045022100e97e7a82ad7942ec9c45ccab3fd4957708d2000d5ff0c473713f58d96282b56602205bcf600f81ca9be8fd51baeae804fe6c1aad2969749a41308371230a79d4f397
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001d31ec2d0c7c426b83b9d70d34bcceeb70a31130016ac59233b58d94617eeb3862b40cbe92dafa3da02d653b1cc11620a5210047621fb358d6f941302e20e69d1c00a234b7d7a63cd8e244c645de87b16f23d18bc1efdcc77531317c47c35a6df638e1c8a41899c4cd6f92ad890265cadb7c3f7ce34787038d2e985ee01052da0ef1c0f8855898efb5dddc063e60c4c1d4f07af801d2785e063b75388e30ca07ca636e229dd922e206e5fb5d190908d82a3f2bed79d0f34f9a585fc9ff3732c1a600e54869009a8759fba7864516ae447cf5ae3ff3f95c97f978533203bf9ea310b8a9cfa2abbd86b04f17b4720b9a399b5c5684ea459d711510a8b0a261098b