sites.libraries.uc.edu

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0d:22:5f:59:8d:58:cc:cc:25:7e:46:2c:af:3c:6d:b8 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sites.libraries.uc.edu

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:22:5f:59:8d:58:cc:cc:25:7e:46:2c:af:3c:6d:b8
Serial Number (int): 17458435962357640150871561959263464888
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2f:aa:37:e1:5e:8d:ee:83:01:02:65:84:c2:3c:20:ea:1d:9d:ca:a8
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 2f:31:00:c6:de:20:6f:df:ff:c8:d7:64:c1:8e:78:1c:22:a5:53:ac
Fingerprint (sha256): 0a:c4:73:44:72:de:ce:5a:72:21:b3:32:7e:55:db:62:7e:91:0f:db:ef:cc:8e:25:4f:38:d7:82:9e:5c:e6:76

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate sites.libraries.uc.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sites.libraries.uc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sites.libraries.uc.edu

Other certificates including the domain name uc.edu

(limited to 100 certificates)
hpb-uccx-pub.uc.edu
*.cech.uc.edu
crimeinformation.cech.uc.edu
listserv.uc.edu
cluster3.technolutions.net
cluster3.technolutions.net
uaa.uc.edu
sfunder8cert.net
hpb-expe-01.uc.edu
i2b2.uc.edu
sip.uc.edu
igw.catalyst.uc.edu
amcc.uc.edu
cluster3.technolutions.net
secure.daap.uc.edu
ehs.uc.edu
hpb-cer-01-ms.uc.edu
ucii.ceas.uc.edu
excap1prd03w.ad.uc.edu
snd-imp-sub-01.uc.edu
www.wise.uc.edu
engage3.campuslabs.com
chi-tools.uc.edu
hpb-uccm-sub-01.uc.edu
admissions.catalyst.uc.edu
listserv.uc.edu
medicineonline2.uc.edu
cancercenter.uc.edu
cluster3.technolutions.net
shoplindner.uc.edu
blog.nursing.uc.edu
fammed2.uc.edu
web.offcampuspartners.com
artsci.uc.edu
donateblood.uc.edu
info.cech.uc.edu
on.uc.edu
aitl-sharepoint.uc.edu
coeustest.uc.edu
hoxqms.hox.uc.edu
ahcweb.uc.edu
n001.offcampuspartners.com
law.uc.edu
behavioranalysis.uc.edu
cluster3.technolutions.net
ucdirectory.uc.edu
multisite.uc.edu
on.uc.edu
ipittr.uc.edu
classics.uc.edu
streaming6.uc.edu
apps.uc.edu
pharmacy.uc.edu
uaa.uc.edu
cluster3.technolutions.net
hpb-expc-01.uc.edu
cme.uc.edu
ucradauthmsb.ad.uc.edu
usertest.webcentral.uc.edu
online.uc.edu
apps-qa.uc.edu
*.cech.uc.edu
*.cech.uc.edu
grad.catalyst.uc.edu
wusap1prd01w.ad.uc.edu
sfunder10cert.net
*.onestop.uc.edu
cluster3.technolutions.net
sfunder10cert.net
classics.uc.edu
rms.uc.edu
*.cech.uc.edu
ucfilespace.uc.edu
sites.libraries.uc.edu
online.uc.edu
fs.uc.edu
on.uc.edu
myhealth.uc.edu
ucradauthhpb.ad.uc.edu
cir.uc.edu
eecs.ceas.uc.edu
sfunder16cert.net
ucitsupport.uc.edu
jobs.uc.edu
ccpd.uc.edu
ixpress-server2.uc.edu
webdev.eecs.uc.edu
hpb-uccm-pub-ms.uc.edu
ahcweb.uc.edu
*.cech.uc.edu
*.ucflex.uc.edu
ccmadmissions.uc.edu
aponline.uc.edu
lawblogs.uc.edu
cgndlp-cms.uc.edu
uclid.uc.edu
airwatch.uc.edu
*.cech.uc.edu
use.cech.uc.edu
web.offcampuspartners.com

Certificate

The complete raw certificate details for sites.libraries.uc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01CpwFSh/5WJhL7EiVp9
/Z1tRxnM+6qsAueHzCRJ+NcVu7WSP4tMXL41VMowW9ks/7heS/jZqUBy86pjH1o8
Q4q6Sr06mm5JXb+01AFeK5MPEAg0YVEBD4OfXHPUlWJz8ty/m7KFhoSxkMpGDKce
OdK4j3lQTeQUx+4t2qaP/wtJvQ0Porv5uZf+u2DaEoPCIYu9la4WTw1VrgzucvV8
FDd4Iulsi1huYBLtcqAKdfXCBbTlGJEBqYrMc6gp+rp0yHzCf4NEpNzHtWjrwUea
zP8THJ35maoDsUg4qXEc+DYIWhitMTnd2IX4sSEGPBE88xi0d0RqoDGVI2BIePMK
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17458435962357640150871561959263464888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sites.libraries.uc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26676058800490290012710043280728832648629866148772061988923179967554759915430704337300728379244447731277029555374592257218118407179845238644424852841920615483649029188911123100668408895747052213993216435048949295824150764033054133061789904968959441546506364017363952050078487761054494369102949254402931209470275073093387846815730205794561914230749728419893581603997830212806472438125704861072825065486508514754799250028189949475815282190634768977366827739362564919490050996950695534605756722447176776145768479128424567700793527692985830523440855260591436716791040894640823393190274485734741163495088974026147777153717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2faa37e15e8dee8301026584c23c20ea1d9dcaa8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.libraries.uc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186211e6cc10000040300473045022100e9d3bb621060f3d5d2dd4259468e52b8529ffa1cac90b9bbfb234a5466b0bbb202204bf92a50e4005dca49e2463e0511e6b49397088d85ac972db9a149a8acce5c2f007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000186211e6d2f0000040300473045022100b836db7b1b4a6bf73216dae27af4dc4f067f6a55d0ab4a04c140051100513c97022067f2b2aa0b001aad82afae49ac96e95cd4a0f66a6642e3a4b7c98058af2cd885007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186211e6ceb000004030046304402200ca35b3f96f794ca638ebd1c3fea8eb2965299ae61cb7f01b878631af2437faa02206df0c563f3e3c93ee148c7a948bdf3e560cfa6610bf4579d9cb42089c483e3f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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