demographics.api.campuslabs.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 01:82:b9:64:91:0e:98:ee:d0:52:e4:14:5e:2e:30:40 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=demographics.api.campuslabs.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:82:b9:64:91:0e:98:ee:d0:52:e4:14:5e:2e:30:40
Serial Number (int): 2007986800880344040686397965556658240
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 72:65:be:47:ba:00:83:19:4b:8c:07:b1:2a:d7:da:aa:0b:9f:8e:58
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 56:a9:5e:ae:dd:d2:ee:2b:27:ec:fc:1d:7f:08:53:6b:45:82:11:97
Fingerprint (sha256): 0f:64:eb:2e:e5:60:18:fb:1f:10:74:ca:b3:00:8b:05:1c:97:99:87:68:03:11:4b:dd:38:05:68:cb:b7:44:ab

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate demographics.api.campuslabs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for demographics.api.campuslabs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

demographics.api.campuslabs.com

Other certificates including the domain name campuslabs.com

(limited to 100 certificates)
sa6gl.wpc.edgecastcdn.net
courseevaluationsupport.campuslabs.com
engage3.campuslabs.com
beaconsupport.campuslabs.com
ssl279011.cloudflaressl.com
Collegiatelink4.Campuslabs.com
insightsupport.campuslabs.com
ssl2155.cloudflare.com
evaluations.campuslabs.com
collegiatelink6.campuslabs.com
beaconsupport.campuslabs.com
ssl279011.cloudflaressl.com
connect.campuslabs.com
collegiatelink.campuslabs.com
ideas.campuslabs.com
ssl379908.cloudflaressl.com
baselinesupport.campuslabs.com
learninglab.campuslabs.com
baseline.campuslabs.com
core-data-api.campuslabs.com
ssl2155.cloudflare.com
engagesupport.campuslabs.com
demographics.api.campuslabs.com
outcomessupport.campuslabs.com
complianceassistsupport.campuslabs.com
courseevaluationsupport.campuslabs.com
complianceassistsupport.campuslabs.com
bourne-status.wifinity.net
courseevaluationsupport.campuslabs.com
baselinesupport.campuslabs.com
cereportapi.campuslabs.com
identityserver.campuslabs.com
ssl379908.cloudflaressl.com
sa6gl.wpc.edgecastcdn.net
courseevaluationsupport.campuslabs.com
insight.campuslabs.com
connect.campuslabs.com
baselinesupport.campuslabs.com
cereportapi.campuslabs.com
outcomessupport.campuslabs.com
ssl379908.cloudflaressl.com
demographics-internal-api.campuslabs.com
insightsupport.campuslabs.com
ssl2155.cloudflare.com
engagesupport.campuslabs.com
beaconsupport.campuslabs.com
beaconsupport.campuslabs.com
ceapi.campuslabs.com
sa6gl.wpc.edgecastcdn.net
Collegiatelink3.CampusLabs.com
ssl279010.cloudflaressl.com
ssl379908.cloudflaressl.com
courseevaluationsupport.campuslabs.com
www3.campuslabs.com
outcomessupport.campuslabs.com
collegiatelink3.campuslabs.com
baseline.campuslabs.com
outcomessupport.campuslabs.com
ssl379906.cloudflaressl.com
ideas.campuslabs.com
cei-reporting-api.campuslabs.com
beaconsupport.campuslabs.com
complianceassistsupport.campuslabs.com
access.campuslabs.com
collegiatelink5.campuslabs.com
outcomessupport.campuslabs.com
ssl379908.cloudflaressl.com
ssl379907.cloudflaressl.com
ssl279011.cloudflaressl.com
ssl279011.cloudflaressl.com
Collegiatelink3.CampusLabs.com
*.home.campuslabs.com
courseevaluationsupport.campuslabs.com
notations.api.campuslabs.com
www3.campuslabs.com
ssl279011.cloudflaressl.com
vpn.campuslabs.com
ssl279011.cloudflaressl.com
ssl279009.cloudflaressl.com
engagesupport.campuslabs.com
complianceassistsupport.campuslabs.com
ssl379908.cloudflaressl.com
www3.campuslabs.com
Collegiatelink3.CampusLabs.com
ssl279011.cloudflaressl.com
collegiatelink2.campuslabs.com
ssl279009.cloudflaressl.com
engagesupport.campuslabs.com
ssl279011.cloudflaressl.com
sa6gl.wpc.edgecastcdn.net
complianceassistsupport.campuslabs.com
ssl279011.cloudflaressl.com
ssl2155.cloudflare.com
cei-setup-api.campuslabs.com
evaluations.api.campuslabs.com
Collegiatelink4.Campuslabs.com
ssl279011.cloudflaressl.com
ssl279011.cloudflaressl.com
beaconsupport.campuslabs.com
corp-exch-01.corp.campuslabs.com

Certificate

The complete raw certificate details for demographics.api.campuslabs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyri+yqQgB3rmnhiscQpw
4FYfVI4hAGnNgsV24eIvS+XJjPhRW6k/QDkE/kwANEi2L2+8qtkhK+LdR2L/Odey
ENhHVCmLn2tbwBnPGvslqqu0vjADFqg5uQleZVv08LqOIfyuiJempCahTe1JrlzS
kdrJd3xpwqB8KqqvRQ6hFxHxGW1KN4lAEtBWZbk0nt8J18EGuur8R/uxQOJNyEpX
Ee3AYtAqbRMuFRg+K3T4zUTTXXl8vkgY3BJif2NU3uzzmev6NFYKddaimpYGGtav
ufdkECvJ7J7aYzPUHTkEPp5yldkI13nZRtz6poVZluwVfmeyhdaoxd4Q2PnhMpEd
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2007986800880344040686397965556658240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demographics.api.campuslabs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25591238895885575256541015063908978077822629421095206543130091209072705763396071375161914509784723020265156925788178970553032507972847432757783441216132713611826768244882839200229156261026335533613388106991688307279110095672210875042350964082608175960889856283437511709245151378210039478982070811521446727951351856558267546346721392215096218162933050735435829299470873287704748802495619139053350090973951792172259060391047744042863190961724238647237448558765972945765759840977531555249912692931365139836154835703998939560446711620167934257908271549052372755521512411025882174900725607900131022837129113279674016931241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7265be47ba0083194b8c07b12ad7daaa0b9f8e58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demographics.api.campuslabs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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