blogs.american.edu

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 02:46:2d:d0:76:bc:3c:bb:82:64:36:e5:19:e8:f2:3e was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=blogs.american.edu

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:46:2d:d0:76:bc:3c:bb:82:64:36:e5:19:e8:f2:3e
Serial Number (int): 3022845996304032985888123384035340862
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): dc:fc:33:6b:32:cc:97:57:d9:bb:c9:a5:86:aa:9f:da:fe:e2:a2:a9
Fingerprint (sha256): 09:55:4b:bc:23:0b:9c:e4:78:10:1a:e3:b5:44:86:f1:fd:be:c0:c6:6b:85:ef:5b:ab:7a:12:4a:10:24:16:db

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate blogs.american.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blogs.american.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blogs.american.edu

Other certificates including the domain name american.edu

(limited to 100 certificates)
titaniumcc.american.edu
2factor.american.edu
dra.american.edu
digitalcommons.wcl.american.edu
dra.american.edu
statcrunch.american.edu
biapp-qa.american.edu
mobileapp.american.edu
landing.online.american.edu
biapp-qa.american.edu
research.american.edu
intern.blogs.american.edu
dra.american.edu
wwwredirects.american.edu
au.blogs.american.edu
domino.american.edu
jobs.american.edu
programs.online.american.edu
papercut-test.american.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
subversion.american.edu
alumni.blogs.american.edu
goed.american.edu
offcampushousing.fau.edu
recfit.blogs.american.edu
spdev-sivakumar.american.edu
onlinebusiness.american.edu
wipar.blogs.american.edu
apply.soeonline.american.edu
recruiterprodapp.american.edu
listserv.american.edu
n002.offcampuspartners.com
www.american.edu
americanmag.blogs.american.edu
auinfra.american.edu
offcampushousing.fau.edu
clockwork.american.edu
vcsandbox.american.edu
spam.american.edu
offcampushousing.fau.edu
webwork.american.edu
calendar.library.american.edu
*.american.edu
openbooks.american.edu
fsmigrateorch.american.edu
privacybasics.american.edu
online-orientation.american.edu
niwaplibrary.wcl.american.edu
aumail7.american.edu
informer.american.edu
us-east-1-san3.blackboard.com
socdeansintern.blogs.american.edu
keysystems.american.edu
informerbidev.american.edu
aumail3.american.edu
blogs.american.edu
*.ironline.american.edu
library.wcl.american.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
www.american.edu
auaccess.american.edu
desigoems.american.edu
bbts.american.edu
*.ironline.american.edu
spweb201.american.edu
vpn.american.edu
careeradvisor.blogs.american.edu
soeonline.american.edu
rctugtst19sqlag.american.edu
incircle.alumni.american.edu
ems.cas.american.edu
webnow.american.edu
cloudfront.american.edu
sccmwks.american.edu
landing.online.american.edu
mediaspace.american.edu
ufund.american.edu
n002.offcampuspartners.com
sccmwksdp1.american.edu
aumail6.american.edu
ironline.american.edu
offcampushousing.fau.edu
digitalcommons.wcl.american.edu
jamfproxy.american.edu
iisredir.american.edu
digitalcommons.wcl.american.edu
colprdapi.american.edu
*.onlinelaw.wcl.american.edu
iisredir.american.edu
2factor.american.edu
intern.blogs.american.edu
offcampushousing.fau.edu
online.american.edu
auadfs.american.edu
colprdssweb1.american.edu
offcampushousing.fau.edu
splunkprdjs.american.edu
*.ironline.american.edu

Certificate

The complete raw certificate details for blogs.american.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AiS/DRCQ2mFSv3oPRzh
59Y5JSRSV4CvjPGSZdUV612CnOZ3UqFo8pD3GF9lr7M/mtiArgNemd3ONQek5YPt
0dnNX6UiJt7NsdHQSavDI8cx1l7m5+CPAt60zAzWhVOFQySUmVWTO1kdyBHfoSSS
y1IsRr/2gUYP8vKtr5TcNavcZ7JBWLTeizaYL8oj0wuuXMDKS4cMRYsAcgHh6QLd
1yvLM3i91hlo7ctONjriLCBFqCiKdZuA7TEQkJptDEB13b8dA8+kt2TaeDGASn5Z
4YoKVXZL1YvG8b+tSKTuLcW0edJXDK302tId78Y8C1DTQc0W/fYnERKhJLqmgL5c
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3022845996304032985888123384035340862
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'blogs.american.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26766748729092120873693137299156827908251704875882349063591750074081520832375188410932478695247943119889151115067663701318712135342899135199977744806455575875449487628334859135943308001458341089329064534874546590004268917842509661757871045061774452017748080760293450571979568410598750676106848251091206319963858057321497659350457228753840829936000369115555591695601659786965157966899205357137738189270619012010723785107255141136487789738625021175955812429945091559300306411677060912850804256166176933304348847618366731630702938573640442250257510025882680059987700528597197762513781747234986302241541737145791865052271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.american.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015398fa97210000040300483046022100ebf084d202c62dc820862947ee82ee0df43bf70745077bc33a0a5ade5f5d11f2022100ab85f213f34d721d9fe3c63419b8b7f887cd4457dfe702a3e88520784618f28f007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015398fa973b000004030047304502206ae12094498e0711d91d3608f133b752752639005aec8b89637fdcefba1f97ba022100c96bd45b834e0ed7c883758a75ee1ef379e1f34df95c32e0ec88cb5382d411c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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