hss.unco.edu

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:0b:26:af:cc:b8:6a:40:2e:20:3f:1b:33:47:92:a0 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hss.unco.edu

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:0b:26:af:cc:b8:6a:40:2e:20:3f:1b:33:47:92:a0
Serial Number (int): 16008635874714138447620725647587381920
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3c:12:59:f2:71:0a:24:b6:1e:0a:19:5b:5e:4c:36:18:1f:f3:64:64
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): b0:a6:e4:66:1d:42:79:f4:e3:0b:68:d6:45:a9:50:5c:4c:fa:cb:8e
Fingerprint (sha256): 0b:86:1c:1f:68:29:62:55:ab:60:12:a0:db:b6:f4:ef:0b:c9:08:d2:ae:bb:69:d2:89:d5:83:31:6c:72:8e:f3

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate hss.unco.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hss.unco.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hss.unco.edu

Other certificates including the domain name unco.edu

(limited to 100 certificates)
itic01.unco.edu
www.unco.edu
uncssbtest.unco.edu
bears.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
zoom.unco.edu
calendar.unco.edu
studyabroad.unco.edu
analytics.unco.edu
itjss01.unco.edu
libguides.unco.edu
www.unco.edu
webxtender.unco.edu
physics.unco.edu
canvascatalog.unco.edu
cas.unco.edu
libanswers.unco.edu
vpn.unco.edu
dwtest.unco.edu
degree.unco.edu
itef01.unco.edu
degree.unco.edu
digscholarship.unco.edu
edge-uc1.peopleadmin.com
libanswers.unco.edu
give.unco.edu
adfs.unco.edu
cluster.technolutions.net
hss.unco.edu
encore.unco.edu
ursa.unco.edu
rentals.unco.edu
uncssb1.unco.edu
cornerstone.unco.edu
studenthousing.unco.edu
rentals.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
owa.unco.edu
sfr.unco.edu
digarch.unco.edu
cluster.technolutions.net
remotepc.unco.edu
libguides.unco.edu
share.unco.edu
www.unco.edu
gobears.unco.edu
digarch.unco.edu
digscholarship.unco.edu
barracuda.unco.edu
owa.unco.edu
remotepc.unco.edu
listserv.unco.edu
apply.unco.edu
isss.unco.edu
share.unco.edu
jss.unco.edu
itcewe01.unco.edu
libguides.unco.edu
uncssb9qa.unco.edu

degree.unco.edu
edge-uc1.peopleadmin.com
owa.unco.edu
remote2.unco.edu
give.unco.edu
rentals.unco.edu
mobile-test.unco.edu
www.unco.edu
rentals.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
edge-uc1.peopleadmin.com
search.unco.edu
itbtinb05.unco.edu
nhsrca01.unco.edu
mathit.unco.edu
digscholarship.unco.edu
share.unco.edu
mathit.unco.edu
learn.unco.edu
testp4p.unco.edu
unc-wireless.unco.edu
unc-guest.unco.edu
libanswers.unco.edu
housing.unco.edu
barracuda.unco.edu
www.arts.unco.edu
remote1.unco.edu
apply.unco.edu
digscholarship.unco.edu
admissions.unco.edu
admissions.unco.edu
remote2.unco.edu
apps.unco.edu
testapps.unco.edu
aw.unco.edu
uncssb9.unco.edu
degree.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
mast.unco.edu
admissions.unco.edu

Certificate

The complete raw certificate details for hss.unco.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu+uoif5xoAlsaOo5O45
Nx4ZPbkeRTkbCcV+Pd/skEKjbtVKRdlqj9xSQnr0J//+bLC+7EPYNB8P5KQCHmUH
Kknuq/Cw3nS5cjo2+rFd+RpU5GGQS7z148e/hOmaz06/Xw1u0xlLJx/YQa81emM/
khlGGL6b9UwWTpTfT99cfLDZSt0wfMNUbuttlob0CWdUy68EIlpUZ1eaPI7qH5XE
zzoGOyJ++x/mVRry/7A+CaF3776YgE7KmwWlhzyEVDmvHvry72muZLe/6f/FDVgZ
imlLvq6q71UrtYeENaLsP36qIp46B9RXCVz2nb7jdKnu8UKwFUXQmUuMwqaRwh6p
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16008635874714138447620725647587381920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hss.unco.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22588609963009455524811598195248396914089013365319716723394263533304166348939895737745034219096315592101605533466831534380821298135143499986858164304711777781334847326346706379271007695111301245520865102662271873978693662916271275348918090136404869409214991928919348067975327245528119662714786900237326746740438338969183205583471552910507755406905953899740411463518993320418163281841239136127899823643027742957341889586502134145460249391833775470942612241396346688501803430194692379513953226718850818235433002072982676233227821203954689385283615912984836590551285916278552402159810269449092685000038711602480177654101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c1259f2710a24b61e0a195b5e4c36181ff36464
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hss.unco.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a8b605f6a000004030047304502200a1fb1923742a5205b8d6570797bc98ad73794f247a6dacf5dac293c26f640ef022100e566bd2d40bd1f378f3e7659f4c0112bc0a4edcfdfb348261f27c47a8e9d778d00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a8b605f81000004030046304402202f7f2102d53d7248699de2f300f17241e3034dda14a6935ebc587edce585528102205612d69c4aee9b2f264cf9bb15da23f0bfe03a584a0ebc8d8c7eb30561d509cb007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a8b605f4f0000040300463044022028b5902e99f0c64f49bbce2a0c18e66a719293e5bb90615fd4eb9114d85e327e022065b9c9d4b30bce7a16b1cd92d5e9db7b0503307b9c37c35fe89ab010419c39ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		003df1328b058ef38f4b6dea0b13d7b19202c361206308bd2babcb6a54b718137d5096a2e2df58b03eb4390c905b10d51a14a31d93290c2ee5e82f4d2c0328e125454e53d928a7bb9dc704fdbe94161196d29cfd20a3f2843423a8a0cdc1afa2c0d0a41fb5e078754d9adcc89b091a57ace0011b501e202251366bac01b5de65986e0ac39c2467d14da888935a838df9352b8a4f921a99ae68b6cf854a06988c9815fddc2fdb43ce8a912b37be51f8e0a807a9e935f3b146d2a0fe74997433b423947bf2b2998d070c18cead46ad69692be3d4699bd6e0855bcd1fbd791337ef465b82fd3d3ee49591b4cd74af2d748deeedeba685dde6b2bd650225ec4fe669615488090c15290ae0f470a5b238812c07a159365cd247a94059ddcf746dca540cff511da08999ebe874d0512d39bc11a28806aad2363fe3e96d1fa5156ac7af655b3624d2905420425ba233dab5d8e4c87cba8f2ce6576ffec5cd1a5957603428e32be81cd89e37c8ccbdd26427f8c1b7769f09804d7fe0498e1d83c5b95bcb02483c7bcf8ca727f1bcc51aa83e26d7004b9ca4eeb11a75b077976c03142681ac9abea064f582211a4678082732bc9c24be2ca240a8512ed92210a5c9ed9359f91f0791281e1e7cdcd2a5e666b98684b0f096e976a4dc9eea9909387f7642f150ef29a8a7591ad9549bea67d69482a12f7151738fbbd61fae910ccfb6908143fe