s2.ad.regiscollege.edu

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:19:7c:57:37:d0:f4:a5:83:29:93:ce:94:25:78:15 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s2.ad.regiscollege.edu

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:19:7c:57:37:d0:f4:a5:83:29:93:ce:94:25:78:15
Serial Number (int): 18741521291367471880736163161820198933
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 30:0c:97:31:d7:1b:c3:63:28:24:90:a8:4c:d4:0f:eb:2e:52:aa:f5
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 3d:57:e8:1a:08:9e:07:4c:f5:7c:17:70:a2:ab:d3:35:5c:1f:08:ca
Fingerprint (sha256): 0e:6e:62:f2:a3:aa:47:34:8a:e8:e0:a4:34:b5:14:42:33:54:cf:aa:10:80:48:91:ec:f0:47:f8:fc:f8:28:54

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate s2.ad.regiscollege.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s2.ad.regiscollege.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s2.ad.regiscollege.edu

Other certificates including the domain name regiscollege.edu

(limited to 100 certificates)
printing.regiscollege.edu
helpdesk.azdelta.be
mail.regiscollege.edu
grad.regiscollege.edu
learn.regiscollege.edu
filedrop.regiscollege.edu
helpdesk.azdelta.be
shibboleth-idp.regiscollege.edu
fsus-3.freshservice.com
regisaccess.regiscollege.edu
alumni.regiscollege.edu
bot.regiscollege.edu
dxr.regiscollege.edu
filedrop.regiscollege.edu
s2.ad.regiscollege.edu
helpdesk.azdelta.be
grad.regiscollege.edu
mail.regiscollege.edu
voicemail.regiscollege.edu
moodle.regiscollege.edu
passwd.regiscollege.edu
learn.regiscollege.edu
helpdesk.azdelta.be
regisaccess.regiscollege.edu
dxr.regiscollege.edu
filedrop.regiscollege.edu
www.regiscollege.edu
easyspooler.regiscollege.edu
*.coursedog.com
www.regiscollege.edu
degreeprograms.regiscollege.edu
degreeprograms.regiscollege.edu
grad.regiscollege.edu
online.regiscollege.edu
myonline.regiscollege.edu
libguides.regiscollege.edu
vpn.regiscollege.edu
bot.regiscollege.edu
printing.regiscollege.edu
changemypassword.regiscollege.edu
regisnet.regiscollege.edu
moodle.regiscollege.edu
changemypassword.regiscollege.edu
shibboleth-idp.regiscollege.edu
mail.regiscollege.edu
adastra.regiscollege.edu
www.regiscollege.edu
adastra.regiscollege.edu
ezproxy.regiscollege.edu
libguides.regiscollege.edu
regisaccess.regiscollege.edu
degreeprograms.regiscollege.edu
mail.regiscollege.edu
reports.regiscollege.edu
mahara.regiscollege.edu
myonline.regiscollege.edu
libguides.regiscollege.edu
regishub.regiscollege.edu
iron.ad.regiscollege.edu
shibboleth-idp.regiscollege.edu
*.regiscollege.edu
grad.regiscollege.edu
libguides.regiscollege.edu
helpdesk.azdelta.be
apm2.ad.regiscollege.edu
alumni.regiscollege.edu
shibboleth-idp.regiscollege.edu
grad.regiscollege.edu
degreeprograms.regiscollege.edu
degreeprograms.regiscollege.edu
*.regiscollege.edu
helpdesk.azdelta.be
apm2.ad.regiscollege.edu
moodle.regiscollege.edu
libguides.regiscollege.edu
adastra.regiscollege.edu
libguides.regiscollege.edu
apm1.ad.regiscollege.edu
*.ezproxy.regiscollege.edu
vpn.regiscollege.edu
helpdesk.azdelta.be
grad.regiscollege.edu
graduate.regiscollege.edu
imap.regiscollege.edu
fsus-3.freshservice.com
fortimail1.regiscollege.edu
MYONLINE.REGISCOLLEGE.EDU
apm1.ad.regiscollege.edu
tms-rti.regiscollege.edu
libguides.regiscollege.edu
degreeprograms.regiscollege.edu
mail.regiscollege.edu
regisnet.regiscollege.edu
fsus-3.freshservice.com
grad.regiscollege.edu
regisaccess.regiscollege.edu
degreeprograms.regiscollege.edu
helpdesk.azdelta.be
alumni.regiscollege.edu
vpn.regiscollege.edu

Certificate

The complete raw certificate details for s2.ad.regiscollege.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KdZoTTto85pyHrVIztS
ltljt9bNv8iacilDVt08FK61+1eO7apBfD9lSSOQl4DzWguaqTIGmycW/EPjfhwv
FvhcR1605LxaD8L4TaU/gQxE7o1eo2SJh5TQP3A6/SrxkmoY+SwdWKqtt7xh6IB0
M4N54B2zQ3LyWYjye0nN2syN/TM6Por4XnQjQrbZj86/KUbuOgcffnmb/8zIKn4R
fQYzGLhf/hMr+c3vemNWo7IERd2d3k9yMq7yztXhhAyB4C59FnwvQDmrDhYt67hA
PEVd2EBDTn6txMi0Bapzqvv/Q+tKvrPyqzlxaLNg2W4HXGDknwunOm5R5wM0Epll
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18741521291367471880736163161820198933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's2.ad.regiscollege.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26845044070728357754491024155145845628057979925790811320455024883254779345429484071136960300821683072128024305884504002947580868935883143439153411646412008057323088827143631889529790599144714998674878014066831362063184091842452028218754955226666731975112105813177985451413772604329161833209704476632530002592764028755152879078702140671287864444461216989179022852632807669924616218090791661898083523719127052574988651859175907096409874430871834020352118791309473782996846460355964655563798714378235919767779206733497616035325794474945377241302389968845490161191145790370765691385127146992057737203111557064125077611849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							300c9731d71bc363282490a84cd40feb2e52aaf5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.ad.regiscollege.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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