multisite.uc.edu

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0d:7e:da:3b:26:33:98:db:01:cb:8d:6a:fd:c4:84:c9 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=multisite.uc.edu

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:7e:da:3b:26:33:98:db:01:cb:8d:6a:fd:c4:84:c9
Serial Number (int): 17938619600957286464375832373889369289
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e7:20:87:7a:17:88:cb:11:16:6d:53:b3:a6:94:67:42:f4:47:a1:1c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 2e:5c:71:97:89:62:8b:29:69:57:23:13:53:f0:63:d3:93:1a:82:1b
Fingerprint (sha256): 06:05:28:41:75:22:dc:de:28:c9:13:51:28:6a:03:29:60:0f:24:d2:1b:56:6d:00:74:15:98:b9:3d:25:0c:fd

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate multisite.uc.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for multisite.uc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

multisite.uc.edu

Other certificates including the domain name uc.edu

(limited to 100 certificates)
hpb-uccx-pub.uc.edu
*.cech.uc.edu
crimeinformation.cech.uc.edu
listserv.uc.edu
cluster3.technolutions.net
cluster3.technolutions.net
uaa.uc.edu
sfunder8cert.net
hpb-expe-01.uc.edu
i2b2.uc.edu
sip.uc.edu
igw.catalyst.uc.edu
amcc.uc.edu
cluster3.technolutions.net
secure.daap.uc.edu
ehs.uc.edu
hpb-cer-01-ms.uc.edu
ucii.ceas.uc.edu
excap1prd03w.ad.uc.edu
snd-imp-sub-01.uc.edu
www.wise.uc.edu
engage3.campuslabs.com
chi-tools.uc.edu
hpb-uccm-sub-01.uc.edu
admissions.catalyst.uc.edu
listserv.uc.edu
medicineonline2.uc.edu
cancercenter.uc.edu
cluster3.technolutions.net
shoplindner.uc.edu
blog.nursing.uc.edu
fammed2.uc.edu
web.offcampuspartners.com
artsci.uc.edu
donateblood.uc.edu
info.cech.uc.edu
on.uc.edu
aitl-sharepoint.uc.edu
coeustest.uc.edu
hoxqms.hox.uc.edu
ahcweb.uc.edu
n001.offcampuspartners.com
law.uc.edu
behavioranalysis.uc.edu
cluster3.technolutions.net
ucdirectory.uc.edu
multisite.uc.edu
on.uc.edu
ipittr.uc.edu
classics.uc.edu
streaming6.uc.edu
apps.uc.edu
pharmacy.uc.edu
uaa.uc.edu
cluster3.technolutions.net
hpb-expc-01.uc.edu
cme.uc.edu
ucradauthmsb.ad.uc.edu
usertest.webcentral.uc.edu
online.uc.edu
apps-qa.uc.edu
*.cech.uc.edu
*.cech.uc.edu
grad.catalyst.uc.edu
wusap1prd01w.ad.uc.edu
sfunder10cert.net
*.onestop.uc.edu
cluster3.technolutions.net
sfunder10cert.net
classics.uc.edu
rms.uc.edu
*.cech.uc.edu
ucfilespace.uc.edu
sites.libraries.uc.edu
online.uc.edu
fs.uc.edu
on.uc.edu
myhealth.uc.edu
ucradauthhpb.ad.uc.edu
cir.uc.edu
eecs.ceas.uc.edu
sfunder16cert.net
ucitsupport.uc.edu
jobs.uc.edu
ccpd.uc.edu
ixpress-server2.uc.edu
webdev.eecs.uc.edu
hpb-uccm-pub-ms.uc.edu
ahcweb.uc.edu
*.cech.uc.edu
*.ucflex.uc.edu
ccmadmissions.uc.edu
aponline.uc.edu
lawblogs.uc.edu
cgndlp-cms.uc.edu
uclid.uc.edu
airwatch.uc.edu
*.cech.uc.edu
use.cech.uc.edu
web.offcampuspartners.com

Certificate

The complete raw certificate details for multisite.uc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sImvmjl/Cj+cukyhhvl
tlihqp8ZRgfugpt1XPYd8rqxG1it0DQ6d6tZTCJXqg4v8p9oKHIfsEikqy0w5CdB
hXpFUnVq6PKUEqacclX7YgCgGFZHrpeviz5oLcIwD7y6lqrEVBGCaKBEvyBnuSb7
/EzMjHwdYeiqDpVoVLp12pIO1Ja5FK/zsZzH5JYkXQREWJ8oY+t0ub1kl24xqL3w
1pODERWuRPY7zsmX0S9xGvOYss2kIRTwUxoosfW3qXPTuqE56OneMFQsfN/krg3q
W504gqe5TT7Np5vEieuDPGNks+1wShUoyrsiNATvzva2OgU/q5vGy6QvKvMudIhh
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17938619600957286464375832373889369289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'multisite.uc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27615690078059380281653134067991848836199466566287017378984164046576741323254151543234641834907520677119786746762443481086208390285464284005907582399011468585504781780926673173172245020829940998758875756428543680983425600145349392650784006836755305171914369310465403588423783853488812538734057622682175248805488828433968726482022619384140182672740923352170626346167007173469049667659390770979797959667280561361518990419192115597001838642420875783981320785613335379004459014217549351599331367514845011537728666626081422584284726585060900943840186733988930548110416384887756292176817084918834670574421300633289634636113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e720877a1788cb11166d53b3a6946742f447a11c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multisite.uc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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