*.sou.edu

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 90:48:4d:ca:69:b1:2f:4f:66:8c:77:f4:27:ac:b3:52 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.sou.edu

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 90:48:4d:ca:69:b1:2f:4f:66:8c:77:f4:27:ac:b3:52
Serial Number (int): 191784254549180831664641161505834578770
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3a:34:67:6e:3b:49:1b:2f:d4:f1:6e:f9:a1:14:f4:b7:0e:91:d4:c5
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 1b:fd:f7:ff:1a:83:49:5b:c7:66:78:f6:7e:ae:9d:18:c5:cd:f2:6d
Fingerprint (sha256): 08:14:d7:21:8d:4e:7f:49:4e:71:c6:67:58:b8:30:65:b5:c5:a5:72:ab:76:8b:48:db:9e:83:36:88:e8:8c:24

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.sou.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sou.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sou.edu
sou.edu

Other certificates including the domain name sou.edu

(limited to 100 certificates)
hanlib.sou.edu
openvpn.sou.edu
sma.sou.edu
cslab.sou.edu
*.ec.sou.edu
development.moodlerooms.com
development.moodlerooms.com
retirees.sou.edu
development.moodlerooms.com
development.moodlerooms.com
catalog.sou.edu
printing.sou.edu
development.moodlerooms.com
rdp.sou.edu
sbdc.sou.edu
development.moodlerooms.com
*.sou.edu
venture.sou.edu
souid.sou.edu
development.moodlerooms.com
cslab.sou.edu
development.moodlerooms.com
mail.pacificbath.webdev14.acsmi.com
search.sou.edu
students.sou.edu
account.sou.edu
image.e.online.sou.edu
edge-uc4.peopleadmin.com
souvpn.sou.edu
development.moodlerooms.com
forms.sou.edu
events.sou.edu
budget.sou.edu
development.moodlerooms.com
development.moodlerooms.com
retirees.sou.edu
development.moodlerooms.com
edge-uc4.peopleadmin.com
development.moodlerooms.com
virtuallab.sou.edu
development.moodlerooms.com
m.sou.edu
retirees.sou.edu
foreman.sou.edu
san-5-s10.tlsprovisioning.exacttarget.com
rec.sou.edu
testmoodle.sou.edu
image.e.online.sou.edu
development.moodlerooms.com
jpr.sou.edu
olli.sou.edu
us.prod.campusgroups.com
development.moodlerooms.com
rvtv.sou.edu
development.moodlerooms.com
sou.edu
hec-kvm.sou.edu
search.sou.edu
www.sou.edu
sftp.sou.edu
inside.sou.edu
edge_uc2.peopleadmin.com
seadragon.sou.edu
development.moodlerooms.com
catalog.sou.edu
rvtv.sou.edu
support.sou.edu
ems.sou.edu
edge-uc4.peopleadmin.com
development.moodlerooms.com
vmail.sou.edu
development.moodlerooms.com
rvtv.dev.sou.edu
moodle.sou.edu
development.moodlerooms.com
clconnect-test.sou.edu
development.moodlerooms.com
faq.sou.edu
xwp.sou.edu
faq.sou.edu
edge_uc4.peopleadmin.com
development.moodlerooms.com
myhealth.sou.edu
ps.sou.edu
rec.sou.edu
aiopnsense01v.sou.edu
tutortrac.sou.edu
sma.sou.edu
webpages.sou.edu
san-5-s10.tlsprovisioning.exacttarget.com
development.moodlerooms.com
development.moodlerooms.com
ba2mba.sou.edu
image.e.online.sou.edu
aiopnsense05v.sou.edu
dgwupg.sou.edu
jpr.sou.edu
support.sou.edu
tenable.sou.edu
escsupport.sou.edu

Certificate

The complete raw certificate details for *.sou.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 191784254549180831664641161505834578770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sou.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782158670978209814982980880080832041402514436755514331232781994610172935524381677030608684034529381050465635096108013779556156941727520021712163014393045048911771544722004570405722490856549146102917747864495375285680208506335480408613224010516776556557967634159112633279933015740216217817091548012175340083177143152700014455237223931949995614179443912947262798268851426148486416976851479713295323303418149423238956678234557920305152207761557341595252963948706579626945830548968756281031781530050267244057638862000953795089005339015278882712635038695661532886536642615849253613366991552805183723518633574428611011058240908654598339903470242227819764584654313295375614370997623889492464636524737351160028032083526487861931068151062120740936043603165116222801679098234056633627846886849038532216677653798972972150603160797386458836204767321737727937226851107295993196668465333115154476735821859075283201374219973434637246363663569435753470458873705121943962370824039288026900445771869376672130105384667539022632650718459526848484310414847857728771712374609671753323480842935206525813305014233546800353332163901272581323971672884789098892102022729665198830312243525715931030432044721185966218193777741601338676160356093580872528610575949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a34676e3b491b2fd4f16ef9a114f4b70e91d4c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sou.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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