canvascatalog.unco.edu

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0d:d7:ee:23:78:d8:57:ab:bb:cb:87:67:c6:7b:a2:71 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canvascatalog.unco.edu

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:d7:ee:23:78:d8:57:ab:bb:cb:87:67:c6:7b:a2:71
Serial Number (int): 18401137793659994554103736511594472049
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 92:28:82:b1:cf:4e:7c:46:a5:2d:40:36:29:b1:df:2b:0b:2a:f5:b5
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 97:90:4d:61:72:d6:27:94:60:54:e8:91:bf:7e:fa:66:7e:d6:25:4d
Fingerprint (sha256): 06:1d:8e:b5:70:3d:b8:b0:a3:49:ea:ff:38:81:f5:1e:85:46:0c:be:cf:b9:86:9e:24:f6:2b:9a:8a:cc:70:0a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate canvascatalog.unco.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canvascatalog.unco.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canvascatalog.unco.edu

Other certificates including the domain name unco.edu

(limited to 100 certificates)
itic01.unco.edu
www.unco.edu
uncssbtest.unco.edu
bears.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
zoom.unco.edu
calendar.unco.edu
studyabroad.unco.edu
analytics.unco.edu
itjss01.unco.edu
libguides.unco.edu
www.unco.edu
webxtender.unco.edu
physics.unco.edu
canvascatalog.unco.edu
cas.unco.edu
libanswers.unco.edu
vpn.unco.edu
dwtest.unco.edu
degree.unco.edu
itef01.unco.edu
degree.unco.edu
digscholarship.unco.edu
edge-uc1.peopleadmin.com
libanswers.unco.edu
give.unco.edu
adfs.unco.edu
cluster.technolutions.net
hss.unco.edu
encore.unco.edu
ursa.unco.edu
rentals.unco.edu
uncssb1.unco.edu
cornerstone.unco.edu
studenthousing.unco.edu
rentals.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
owa.unco.edu
sfr.unco.edu
digarch.unco.edu
cluster.technolutions.net
remotepc.unco.edu
libguides.unco.edu
share.unco.edu
www.unco.edu
gobears.unco.edu
digarch.unco.edu
digscholarship.unco.edu
barracuda.unco.edu
owa.unco.edu
remotepc.unco.edu
listserv.unco.edu
apply.unco.edu
isss.unco.edu
share.unco.edu
jss.unco.edu
itcewe01.unco.edu
libguides.unco.edu
uncssb9qa.unco.edu

degree.unco.edu
edge-uc1.peopleadmin.com
owa.unco.edu
remote2.unco.edu
give.unco.edu
rentals.unco.edu
mobile-test.unco.edu
www.unco.edu
rentals.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
edge-uc1.peopleadmin.com
search.unco.edu
itbtinb05.unco.edu
nhsrca01.unco.edu
mathit.unco.edu
digscholarship.unco.edu
share.unco.edu
mathit.unco.edu
learn.unco.edu
testp4p.unco.edu
unc-wireless.unco.edu
unc-guest.unco.edu
libanswers.unco.edu
housing.unco.edu
barracuda.unco.edu
www.arts.unco.edu
remote1.unco.edu
apply.unco.edu
digscholarship.unco.edu
admissions.unco.edu
admissions.unco.edu
remote2.unco.edu
apps.unco.edu
testapps.unco.edu
aw.unco.edu
uncssb9.unco.edu
degree.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
mast.unco.edu
admissions.unco.edu

Certificate

The complete raw certificate details for canvascatalog.unco.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75dgplIcQo3wi7LAZkFZ
ZrGcYSj2zkeM2MyWmBXXX/Ti0+5VWWzK38vs7ercZOzQgC+UbII6UMZYw6Z6uQrV
ioNThCPymhMxOsVT44tQiJUUCAVbiolNAIGFTsdv2BC9qc51FvmM6h9HDSo0ZdJI
jogpp642Qp6QeKCD/Pph5gBk4iN2gLpnPOrsSSZ3WGYdyxUDhdekO0CxMv8+75FA
dLyzb9gwR5pHOZ5ZyQZM+YzaRIR1FIUFJjLb7pseFYeqXH5OI5PbE8kSl27kZsS8
1wIECo3fjCQ3drjJAbVnMfarguLjOD0jx+urFAK+GpUQUUpfO8T5QODx5hy5ljbE
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18401137793659994554103736511594472049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canvascatalog.unco.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30245601932936902933134423331602635179348885418798486824869450235841102331151622518470973525115462715738336923008744832302279544878884457069540459773619595723678063909620503236125148178358750611051291621777739656875960567429395945566310241111627357327719453887519583006589419375453083862016292867994318279600859323984708003739856985477011220441004230116957031743307213714633946014297240957959198971411635556158311242468857460309654049171566925580608381689386374124096984170984654407230524002043426436608250011154546004243446808109241902576723647402570717849627323192797141124103215412635771014439965972886029979796513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							922882b1cf4e7c46a52d403629b1df2b0b2af5b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canvascatalog.unco.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00c53888b915272b5a3f13b3be8f6a0078639ec3a632b3937d7f80623ed11d2bf4190d4361a6f2dfcf07a6ec8087083e35eea666a454c2f47d621ede8b43574a4d33649bb83fc48fe356c0a1cb339fe30dea4346bf3ae6f5b2a4f0c6a3efc776ceab94e8d409febe819d81427db4b7dbf0b7b5c66b11a9d19b9a0117ef8372948b0e08021d38bf9cd5fae885ca99392d28883f8285214290b4643acf342e98a741e6085e0ec0b5d516eafb19ce535ade25159ba9bbe5277f40323f9fcaf24d06e2744eb16937c0007f3b4cd1171b3c0e174892887b121d32b0734ac84d0ef41e10719bd275e7f89e1e2ea5058e75d33a68c869dd876f69b4004bcef6186b8a3dacc733cec7a73c8728774133dc1953c9723b5389bf2c4e088901d218f1a1129dd39c30ffd659917046b9b8332c8cf72f406c8cb8354fb6e4dfcb560869c8a76059274a10c8d3f30eac7e6b1b8bbee1f2ed847e4a99bcd729bd2dc552c0d5bcb0443cd9bb5f16a8cb937c61527444f4af1c3aa7ebc8a99573730ccd82aa89a831275afd99bd1c97dd477ff66e53748cc143a5d3b96afdbe23b4a86fdbe8f303e590351d50bf764b8bd140beff6e2962d9eee0da8f807a48edcd31330d5a3d66da09227dde90802f91c0827d887527862ea196e136a6e59698b8cdfba137e43b9487fd2e5510215d13db4d9b76e72874588cafcee6ffe3d89815511af49895762ea3