www1.ucdenver.edu

- University of Colorado Denver -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 42:3a:28:aa:e1:80:8d:b1:1d:cd:85:a4:96:dd:bf:33 was issued on by Sectigo Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Colorado Denver

Organization: University of Colorado Denver
State / Province: Colorado
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 42:3a:28:aa:e1:80:8d:b1:1d:cd:85:a4:96:dd:bf:33
Serial Number (int): 88031025774560779941469001761402240819
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4a:ba:11:e4:65:7e:29:85:74:58:d7:a0:1b:26:3f:cf:51:1e:14:89
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 8c:90:24:d7:af:a7:76:0e:33:d8:61:c2:88:41:5f:e1:45:44:9a:5f
Fingerprint (sha256): 0c:ff:df:e9:53:57:82:58:87:9e:c1:eb:d3:3d:1b:2d:e6:2f:b6:91:ad:a8:98:b6:5c:b1:b1:ba:9a:1c:d4:ce

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www1.ucdenver.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www1.ucdenver.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www1.ucdenver.edu

Other certificates including the domain name ucdenver.edu

(limited to 100 certificates)
profiles.ucdenver.edu
cluster3.technolutions.net
architectureandplanning.ucdenver.edu
skyline.ucdenver.edu
waf2.offcampuspartners.com
tls.automattic.com
myaccount.ucdenver.edu
sehdforms.ucdenver.edu
webapps-int-test.ucdenver.edu
buildinginspections.ucdenver.edu
forms.ucdenver.edu
citeak.multidevcom.uaf.edu
skyline.ucdenver.edu
da-prod.sdm.ucdenver.edu
cluster3.technolutions.net
source.ucdenver.edu
ucdenver.edu
gem.business.ucdenver.edu
chns120.courseresource.yale.edu
profiles.ucdenver.edu
remote.ucdenver.edu
educationsurvey.ucdenver.edu
survey.alumni.ucdenver.edu
tls.automattic.com
dc-acs.ucdenver.edu
dhharedcap.ucdenver.edu
dev.wellness.yale.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
vpn.ucdenver.edu
gp-vpn.ucdenver.edu
cuoform.ucdenver.edu
cuonlineblog.ucdenver.edu
eap.international.ucdenver.edu
offcampushousing.fau.edu
live.ucdavis.edu
ogc.ucdenver.edu
application.admissions.ucdenver.edu
hslibraryguides.ucdenver.edu
chns168.courseresource.yale.edu
dhharedcap.ucdenver.edu
n002.offcampuspartners.com
mycusouth.atelinttest.ucdenver.edu
psoa-ucd.ucdenver.edu
murpjobs.ucdenver.edu
liberalarts.ss.pacific.edu
dev.embody.yale.edu
club.kjzz.org
phenogen.ucdenver.edu
offcampushousing.fau.edu
oncoreval.researchadmin.ucdenver.edu
myaccount-test.ucdenver.edu
dev.wellness.yale.edu
offcampushousing.fau.edu
idfinder.ucdenver.edu
oncorerss.researchadmin.ucdenver.edu
gem.business.ucdenver.edu
connectmeeting.ucdenver.edu
cytometry.som.ucdenver.edu
fe-26.ucdenver.edu
mydesktop.ucdenver.edu
cuonlineblog.ucdenver.edu
v-fe26-2017.ucdenver.edu
mybabymymove.ucdenver.edu
webapps-test.ucdenver.edu
cuonline.edu
ucdenver-wireless.ucdenver.edu
clinicaltrials.ucdenver.edu
cluster3.technolutions.net
208.lsnc.net
remote.ucdenver.edu
ldap-ad.ucdenver.edu
forms.ucdenver.edu
live.bme.cornell.edu
hslibraryguides.ucdenver.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
oitsupport.ucdenver.edu
educationsurvey.ucdenver.edu
onlinelearning.ucdenver.edu
legacy.hq.philabundance.org
banking-business-review.com
som.ucdenver.edu
remote.ucdenver.edu
application.admissions.ucdenver.edu
news.ucdenver.edu
connect.iadb.org
www1.ucdenver.edu
jira.ucdenver.edu
star.ucdenver.edu
hsl-ezproxy.ucdenver.edu
5637869485948928-fe4.pantheonsite.io
n002.offcampuspartners.com
auth-prod.ucdenver.edu
virtue.ucdenver.edu
offcampushousing.fau.edu
som.ucdenver.edu
cophin.ucdenver.edu
impulse.ucdenver.edu
cluster3.technolutions.net

Certificate

The complete raw certificate details for www1.ucdenver.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88031025774560779941469001761402240819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Colorado Denver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www1.ucdenver.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 580281347469628720990494393098453053655376749884647771974761558379649446230820034945496634553737362342766807992891219298628486372685429859736799616117602036403816710531064566195590567400014224734064235201331915181016439874751750926606601382058075547004298907628048335621098866064226622781437209959910125163060513504548816406283325915857977189824821731474687334261294546614706397926458333223449757568103240528281047878483948574281474722236717159070657133331665073033243712207168890240204190503888332564642737830574184351992060296351188433582166593163492910568442295346479977618167074132260764903994168162359488802432377443279360086985146557111990202874722446262032907780857095262516489492808462798487913694120077595411119799864840151898178194615912115153909721203677221947102460160711587303287035806569020365706574271199971674336326995381201768757197800886427344560418580345935077264675168854864358386126339971768152883218066079329832311640834658520958677796545348158653604065210525938088231870598203428340002694261073547392745742795302372762162671740456993421727708804231334562241668178930242208932938024904915097186525434528331243749140853551725634618458932797210230305953942692022701482411056773433368904047850822989015169294196139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4aba11e4657e29857458d7a01b263fcf511e1489
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ucdenver.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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