cme.uc.edu

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:bd:a2:bc:6a:8e:3d:f8:9c:8c:b5:d3:f4:c0:2e:7d was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cme.uc.edu

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:bd:a2:bc:6a:8e:3d:f8:9c:8c:b5:d3:f4:c0:2e:7d
Serial Number (int): 16935380733909788306818526615124848253
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1a:82:d6:ef:55:82:bf:cf:cd:f3:6a:56:8b:74:45:a5:5a:71:58:42
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 99:05:29:90:da:ee:17:b0:a5:bc:d4:5b:4c:e3:ff:1a:49:d4:be:8f
Fingerprint (sha256): 07:6b:d7:7c:51:a3:7f:ef:4c:87:d3:ce:c1:44:83:da:2f:7a:72:68:74:24:f3:e5:2f:81:44:e6:de:0e:89:95

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate cme.uc.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cme.uc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cme.uc.edu

Other certificates including the domain name uc.edu

(limited to 100 certificates)
hpb-uccx-pub.uc.edu
*.cech.uc.edu
crimeinformation.cech.uc.edu
listserv.uc.edu
cluster3.technolutions.net
cluster3.technolutions.net
uaa.uc.edu
sfunder8cert.net
hpb-expe-01.uc.edu
i2b2.uc.edu
sip.uc.edu
igw.catalyst.uc.edu
amcc.uc.edu
cluster3.technolutions.net
secure.daap.uc.edu
ehs.uc.edu
hpb-cer-01-ms.uc.edu
ucii.ceas.uc.edu
excap1prd03w.ad.uc.edu
snd-imp-sub-01.uc.edu
www.wise.uc.edu
engage3.campuslabs.com
chi-tools.uc.edu
hpb-uccm-sub-01.uc.edu
admissions.catalyst.uc.edu
listserv.uc.edu
medicineonline2.uc.edu
cancercenter.uc.edu
cluster3.technolutions.net
shoplindner.uc.edu
blog.nursing.uc.edu
fammed2.uc.edu
web.offcampuspartners.com
artsci.uc.edu
donateblood.uc.edu
info.cech.uc.edu
on.uc.edu
aitl-sharepoint.uc.edu
coeustest.uc.edu
hoxqms.hox.uc.edu
ahcweb.uc.edu
n001.offcampuspartners.com
law.uc.edu
behavioranalysis.uc.edu
cluster3.technolutions.net
ucdirectory.uc.edu
multisite.uc.edu
on.uc.edu
ipittr.uc.edu
classics.uc.edu
streaming6.uc.edu
apps.uc.edu
pharmacy.uc.edu
uaa.uc.edu
cluster3.technolutions.net
hpb-expc-01.uc.edu
cme.uc.edu
ucradauthmsb.ad.uc.edu
usertest.webcentral.uc.edu
online.uc.edu
apps-qa.uc.edu
*.cech.uc.edu
*.cech.uc.edu
grad.catalyst.uc.edu
wusap1prd01w.ad.uc.edu
sfunder10cert.net
*.onestop.uc.edu
cluster3.technolutions.net
sfunder10cert.net
classics.uc.edu
rms.uc.edu
*.cech.uc.edu
ucfilespace.uc.edu
sites.libraries.uc.edu
online.uc.edu
fs.uc.edu
on.uc.edu
myhealth.uc.edu
ucradauthhpb.ad.uc.edu
cir.uc.edu
eecs.ceas.uc.edu
sfunder16cert.net
ucitsupport.uc.edu
jobs.uc.edu
ccpd.uc.edu
ixpress-server2.uc.edu
webdev.eecs.uc.edu
hpb-uccm-pub-ms.uc.edu
ahcweb.uc.edu
*.cech.uc.edu
*.ucflex.uc.edu
ccmadmissions.uc.edu
aponline.uc.edu
lawblogs.uc.edu
cgndlp-cms.uc.edu
uclid.uc.edu
airwatch.uc.edu
*.cech.uc.edu
use.cech.uc.edu
web.offcampuspartners.com

Certificate

The complete raw certificate details for cme.uc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFdQr1fQn5gVRkNepdHY
LTZ86/Cf355NAT1Nf0HqTopyvoch+1KFu6TyqFjimcsTXXupR44V9CMZ/DnlovGQ
eDGnkkKg+N5LTW/zuImRRcVI5v50rpoKF38jv3ONNq+P9cqoZrzMkL33t7iCkxJo
rtN6uHQ7pMnfCJQFgkNinBUxqrrQt/0GB9ZfKiVGhlYQuuoSVD8fQ0RzuCju1yzn
xoyAxsFy/0mH8xC7glANvqjkK8f0xBr/pg38H5Cyh9LJnbrXvmWb7tnaSro6AyZW
GDdD4G8Op5AJyViC2X1SpPaLCnpQBPEzPmZj+S2tpLvrVxgfdSvpcx+xqD/3AmG5
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16935380733909788306818526615124848253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cme.uc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24280811271279132406455948757014521775942703394738100008406189063318617289518571988330293919740811044047556357118848254111551197889810846974904833386372711804787972952745765378555737710683007719354946410629555125481356192439664626126306305077662894501285375554234699566230611184625299659999621307046073677616246693081126317765053877921672359152923951981322663341103557058472457287616439102631578582584948892327107011246246999343396218648908736699164516349148405355520794693953960442996822378607352203475926260469204477343787848249554100352221181808579107797890191980363866575253318891204028050118325101690270204934409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a82d6ef5582bfcfcdf36a568b7445a55a715842
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cme.uc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018623e2251c00000403004730450221008be6e8175619eed0e7bef4cdb26a8d1db8a98713b4f3d945781646c1c428ecec0220115b08c215c6d68b13e3a9ec195d64b2bbdbd8a01d0847c2a3a94b85ca0f974c007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018623e2251b0000040300483046022100dac03fc13ae0aaaf9edc0193afcdd0ea3860f895e5a338b2cb8f6ebd77834f6e022100ec84563efd54e1b1c70d234676d9baf37683f4724e8b6a3011c6880fba6ed740007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018623e224d90000040300483046022100dcf8f3ebe2fb84d99a0d280c8f46739b2ebdda6a197d27d4a5f0878445e82fb6022100cf73abd5630f65fced571493fcfcba661d11e489f8dcaba8d15b402047e31bf8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		001bf3ad13eb0b622f3e436d837f78e30b7cdac0f53f51271c7495496c5c73d73acf6a682f6afb6d8fd1894efb28ef8ef982185d8f7222944b7f3e741c52e1b2d7277d0b856efd022e3eeb08629e8369f298834a4c58132939175b3c651d0c152134b6973071c1fc1147788ebb22acd5fc2271a04b11ba6c369a22ae92b6bcdf7da15ecdd1031406cef975ae669373a42a0d9892877a3e1ee8e2acf9fd42be06ac2b03d4f0b7c56ade293fe13be7f644943730d9d3d91b1414951115d3f7734b2efb4e2e1e5ee959e0941f499fb8aa6dc5d76e1f893c51d380f09b516de96e82105f297501ae8fa013e02879956dd22375fbed313f3094d5c27e775e4f26ee63b17df43cbb5f7ba8b7b3c4948e6642da1b6ababdda425e7f8ad63abe0f68803eb574519d2f2cc1718dc4b4a49dd55e9e5d7aff6d828e5f4c021d26724666ddda2cd1d81acfc7e0957d85c6db14c281eebca9c8b7f4b5872badf853513fdabde0dfe33a54f444ca88644f1cf7090c2d2cdaa1f92433840146956a42b843f98c858fad6070bae6e9055a90626ba54739f2dd350a237de7fa0b162b5b65258e319021fe1c9fa32d0d543674a815f9dd8eda2da65b0b7e342d25c6b0d2861f86714b8197ea65a1e8f2369a82733879c05a0bc96af65d87c354ac5070cff0403b883c555ae5f22d955fe248a812da80dee13609b9a1ed2fcf485d5ea760e648ca9fa49c