ever-brighter.miami.edu

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:dd:7b:9e:07:e6:b5:47:b4:a0:fb:5e:92:4b:2d:e1 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ever-brighter.miami.edu

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:dd:7b:9e:07:e6:b5:47:b4:a0:fb:5e:92:4b:2d:e1
Serial Number (int): 7796144841537006757980448419130060257
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 48:90:64:82:92:d2:27:fb:dd:e7:0f:e3:ba:e6:62:46:e1:1b:96:70
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 71:f2:7a:fa:6b:6a:6c:d3:ae:19:2b:58:7f:72:f9:cd:a7:40:bd:cc
Fingerprint (sha256): 05:8d:db:41:a6:82:c8:a7:e5:6b:2e:04:1d:4d:04:14:e8:bb:5d:d6:66:42:5e:07:1d:f3:e7:76:a0:47:bb:43

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate ever-brighter.miami.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ever-brighter.miami.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ever-brighter.miami.edu

Other certificates including the domain name miami.edu

(limited to 100 certificates)
welcome3.staging.miami.edu
genomics.med.miami.edu
myuhealthchart.com
enet.miami.edu
frostonline.miami.edu
canelink.miami.edu
projectconf.miami.edu
joo.coe.miami.edu
apply.miami.edu
amploadvance.com
cacti.tel.miami.edu
blog2.miami.edu
enet.miami.edu
welcome.miami.edu
uconnectlabs.com
testuchart.med.miami.edu
m.canelinktst.miami.edu
welcome.miami.edu
com.miami.edu
umeeweb1d.cgcent.miami.edu
tptp.cs.miami.edu
redcap.med.miami.edu
viacomp.miami.edu
*.it.miami.edu
*.fcdslmsdemo.med.miami.edu
welcome.staging.miami.edu
www.miami.edu
devices.miami.edu
uh-emr-intlbprd.med.miami.edu
fcdsnew.med.miami.edu
anthurium.miami.edu
umculture.miami.edu
welcome3.miami.edu
asb.as.miami.edu
netauth.miami.edu
careers.med.miami.edu
umchat.miami.edu
frostonline.miami.edu
www.sa.miami.edu
hemba.mbs.miami.edu
welcome3.dev.miami.edu
uh05maesdbsp00.cgcent.miami.edu
fcdsfw.med.miami.edu
lawapps.law.miami.edu
viacomp.miami.edu
oceanlab3.rsmas.miami.edu
dev1.itlabs.miami.edu
webmail.bus.miami.edu
sbarms.bus.miami.edu
uconnectlabs.com
uhclintapp1p.cgcent.miami.edu
tls.automattic.com
canelink.miami.edu
canelink.miami.edu
uh05bsobappt00.cgcent.miami.edu
*.library.miami.edu
web.offcampuspartners.com
uconnectlabs.com
scccsolr.cgcent.miami.edu
clinicalapps.med.miami.edu
welcome3.staging.miami.edu
teststacks.library.miami.edu
welcome3.miami.edu
webmail.law.miami.edu
tls.automattic.com
fcdsmoodle.med.miami.edu
bootcamp.miami.edu
tls.automattic.com
n001.offcampuspartners.com
internal-canelink.miami.edu
canelinktst.miami.edu
ever-brighter.miami.edu
mycanes.miami.edu
m.canelinkpst.miami.edu
crmdev.miami.edu
velostraining.med.miami.edu
globalemba.mbs.miami.edu
healthyu.med.miami.edu
*.courses.miami.edu
amploadvance.com
www.sarc.miami.edu
uh05cbdldbst00.cgcent.miami.edu
*.miami.edu
wss.law.miami.edu
welcome.miami.edu
clairvia.med.miami.edu
www.globalacademy.miami.edu
coedev.miami.edu
mcsl.med.miami.edu
magec.med.miami.edu
uhemrprovapp1p.cgcent.miami.edu
coll.ubiquitypress.com
welcome4.miami.edu
www.courses.miami.edu
osha.mededu.miami.edu
oceanlab.rsmas.miami.edu
welcome.staging.miami.edu
goabroad.miami.edu
welcome3.dev.miami.edu
asd.as.miami.edu

Certificate

The complete raw certificate details for ever-brighter.miami.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvEjazBm5LdP8Ubv1Rxf
25xxYjeyYdRTjlQ4Zlz5q9vN3V39n412vVZIlPPR7e8SFdqXYv9c6iQgNBRPvPw1
6dYPtV3kEud3mv4MpB4AaRTr/fGrcVLTzVUvRLuW50R2XAM9ejd4ugjKNToSjDjf
jjp17fTn5uMO7kdBJqRWT04c5Mg7JpNkDtDlihoJvefU+11AR+/0PiTZcrcOxYFc
oN2N7UA5djyrMsNfYUdBvzx39bFCcVGDC8rLGmky57DxV6q4xTa3tyayhHpE5Liw
gIGjPawrIICL24ykYvenPr44VlzxfvWoXinVOPba2QM8LvjgdzSJ1tTF17Y++/g5
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7796144841537006757980448419130060257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ever-brighter.miami.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19559608719118123651184134638884192243416045520714456718648373294695904952976542371446171196663115282706528681509275236291367195997960369570954264959100601154514419202685218333335277113199892145862648634558906146824575887858140519548737218629091207135805699280861015201907046733864724178899911049884630830981834045199540738597524240526333626379102312987409554054391160111724661562445939572644653463673162140959851608845486061080452863744445882142941425348555224573040745088651799841024588391619414374154713472423174999025316403037194954072865330466675920680953183181477159134283711942626352191613223739814488181324253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4890648292d227fbdde70fe3bae66246e11b9670
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ever-brighter.miami.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018a8565b482000004030046304402201f71361e917c70c1aced3677fc7752d90dbffafa0bc59b01ba3c10786ae1e6c4022011c69b89b86a90d7056b4a86753dd7a1dd1ed9285ba88ca1d2a899a449caf6fc00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a8565b44900000403004730450220086633bccdc966526684edc0b6c1f10d30abddbfd292cde6130bd926c8d45d49022100e80eb5a5646a8dffc8c489e009b3003d9af2affac1691f85154f6298425007340076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018a8565b4400000040300473045022058661edd6a611e80ddac01fa62421cf583d1c68f9842b53a97dd443f28215f82022100e56900d5e22a0fa87f32c054cfb0cde205829d99e5396ab1784a30ed894ea8dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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