media.ggc.edu

- Cloudflare, Inc. -

Issued by Cloudflare Inc RSA CA-2

About this certificate

This digital certificate with serial number 02:39:9b:24:cd:9d:3d:2c:e3:15:55:d4:13:06:a0:ce was issued on by Cloudflare, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cloudflare, Inc.

Organization: Cloudflare, Inc.
State / Province: California
Locality: San Francisco
Country: US

Cloudflare, Inc.

Organization: Cloudflare, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:39:9b:24:cd:9d:3d:2c:e3:15:55:d4:13:06:a0:ce
Serial Number (int): 2957563601843250702496226953906266318
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d8:25:3a:0d:22:9c:c5:ee:78:fd:20:11:68:6c:eb:04:d5:77:21:2a
AuthorityKeyId: 18:a9:1a:fc:b2:45:49:c1:6f:30:34:08:2b:d9:87:9c:b0:25:57:7a

Fingerprint (sha1): 71:88:23:88:df:c8:4b:a9:16:45:ad:69:63:4b:2f:33:c9:29:d4:35
Fingerprint (sha256): 10:e0:a5:9f:2e:35:b5:90:14:91:1b:29:c9:21:23:09:c6:8a:8b:19:59:14:6c:ae:a8:58:32:51:3d:31:b0:60

Issuing Certificate URL: http://cacerts.digicert.com/CloudflareIncRSACA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudflareIncRSACA-2.crl
CRL Distribution Point: http://crl4.digicert.com/CloudflareIncRSACA-2.crl

Check the revocation status for certificate media.ggc.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for media.ggc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

media.ggc.edu

Other certificates including the domain name ggc.edu

(limited to 100 certificates)
*.ggc.edu
wellness.ggc.edu
gil.uga.edu
commons.ggc.edu
gil.uga.edu
wiki.et.ggc.edu
adobestatus.banyanops.com
fall2016.engage.ggc.edu
hercules.ggc.edu
*.ggc.edu
fall2017.engage.ggc.edu
collegiatelink.studentvoice.com
generalspace.ggc.edu
conference.ggc.edu
*.ggc.edu
recruiter.ggc.edu
spring2015.engage.ggc.edu
commons.ggc.edu
collegiatelink.studentvoice.com
fall2017.engage.ggc.edu
webapps.ggc.edu
summer2015.engage.ggc.edu
radius2.ggc.edu
spring2014.engage.ggc.edu
fall2015.engage.ggc.edu
itservices.ggc.edu
adobestatus.banyanops.com
irb.ggc.edu
ieescoring.ggc.edu
*.ggc.edu
blog.ggc.edu
cte.ggc.edu
*.libproxy.ggc.edu
fall2014.engage.ggc.edu
ggc.edu
libcal.ggc.edu
capture.ggc.edu
start.ggc.edu
summer2015.engage.ggc.edu
media.ggc.edu
commons.ggc.edu
fall2014.engage.ggc.edu
summer2016.engage.ggc.edu
askalibrarian.ggc.edu
spring2017.engage.ggc.edu
www.dnguyen80.domains.ggc.edu
summer2017.engage.ggc.edu
gil.ggc.edu
teacherweb.ggc.edu
courses.qep.ggc.edu
vpn.ggc.edu
summer2017.engage.ggc.edu
adobestatus.banyanops.com
libcal.ggc.edu
spring2015.engage.ggc.edu
*.ggc.edu
collegiatelink.studentvoice.com
spring2017.engage.ggc.edu
helpdesk.ggc.edu
summer2015.engage.ggc.edu
summer2017.engage.ggc.edu
commons.ggc.edu
askalibrarian.ggc.edu
engage.ggc.edu
fall2015.engage.ggc.edu
opssupport.ggc.edu
ggc-nps-01.ggc.edu
blog.ggc.edu
commons.ggc.edu
fall2017.engage.ggc.edu
fall2016.engage.ggc.edu
blog.ggc.edu
fall2016.engage.ggc.edu
spring2014.engage.ggc.edu
askalibrarian.ggc.edu
fs.ggctest.ggc.edu
fall2015.engage.ggc.edu
summer2016.engage.ggc.edu
summer2015.engage.ggc.edu
commons.ggc.edu
catalog.ggc.edu
*.ggc.edu
gil.ggc.edu
jobs.ggc.edu
mail.dlowe7.domains.ggc.edu
myinfo.ggc.edu
commons.ggc.edu
my.ggc.edu
askalibrarian.ggc.edu
*.ggc.edu
summer2015.engage.ggc.edu
summer2017.engage.ggc.edu
ggc-recruit-apply.gabest.usg.edu
*.ggc.edu
gil.uga.edu
fall2015.engage.ggc.edu
*.ggc.edu
*.ggc.edu
engage.ggc.edu
libcal.ggc.edu

Certificate

The complete raw certificate details for media.ggc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs72/3Btu0wuhcwc0D1Ux
ezJSIkp/JEt1Anj7zgL9E4cHOgLdiVOBpdUwCLdeHs0vA2mLY1Bty4Cr4OwcQSyU
Jj9Un6FBflAdROOoyZtbuKkvsQ4uNOdZ8kZWBUNaisxsxcDhQC4QsLSzxMvx+IKl
fGj/vmS26P2dIGE2vRhGm4dSNUK0K15RD2N3Ps5TauQJGVFApyGnU89t4FdN4/NK
R69DoqU3vfoqnhnXACXJuaX+ZR+jRJJz/IHr2rGhUZXSOqbG1GNoiKAAFRTqA3Ml
9Abczg+/rvRlUqLswPE+HGIthGb0XJS9IyuqFjPzLlT74+M66bch3nYnRcC0wo0u
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2957563601843250702496226953906266318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare Inc RSA CA-2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media.ggc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22690225531225092945043586756438784442663485526671882688509785917561182925442752361452446004282883087752544183871199459285485118853765090128724022390485187056440313819324382357481679444831432732368058323797424345390754409753655931548562789356773406935022282103732009740497638498129083382878369408497244338978126683587718899397581263471389093239264789492342271542599372573166897990328483255298209845458362538947151624871893946062778392382414208723219214867723527231439884742123865705213607861873460562013589177954796985626341969255902451382954269957539471096773891336101328300962678698639044549675868468933374033866401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 18a91afcb24549c16f3034082bd9879cb025577a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8253a0d229cc5ee78fd2011686ceb04d577212a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.ggc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudflareIncRSACA-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudflareIncRSACA-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudflareIncRSACA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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