verse.ncte.org

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:1d:ba:c3:64:c6:d6:1b:a3:6a:66:0a:8f:93:e8:f9 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=verse.ncte.org

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:1d:ba:c3:64:c6:d6:1b:a3:6a:66:0a:8f:93:e8:f9
Serial Number (int): 16105100567183349359000717961282709753
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c4:b0:ec:0b:10:57:ad:65:6f:11:26:b1:85:72:d5:c8:61:1c:d3:2b
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 62:d0:e7:24:25:0f:14:7c:d4:02:9a:aa:e9:46:4e:69:48:d4:e1:82
Fingerprint (sha256): 17:23:ae:5f:e4:01:6e:9f:f7:72:e6:01:b7:3c:00:c7:25:a2:7b:42:69:93:ee:16:06:50:74:cd:73:15:9f:a2

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate verse.ncte.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for verse.ncte.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

verse.ncte.org

Other certificates including the domain name ncte.org

(limited to 100 certificates)
5693048138760192-fe2.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
2021convention.ncte.org
apiv2.ncte.org
5130657403502592-fe4.pantheonsite.io
5645012914143232-fe3.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5717994718101504-fe4.pantheonsite.io
5645012914143232-fe3.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
helpdesk.ncte.org
5130657403502592-fe4.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
sni115ddgl.wpc.edgecastcdn.net
helpdesk.ncte.org
5732095699714048-fe1.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5645012914143232-fe3.pantheonsite.io
5717994718101504-fe4.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
helpdesk.ncte.org
5693048138760192-fe2.pantheonsite.io
verse.ncte.org
library.ncte.org
secure.ncte.org
5732095699714048-fe1.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5717994718101504-fe4.pantheonsite.io
5717994718101504-fe4.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5717994718101504-fe4.pantheonsite.io
5717994718101504-fe4.pantheonsite.io
5645012914143232-fe3.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
ncte.org
5680163505307648-fe4.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
cccc.ncte.org
*.ncte.org
5717994718101504-fe4.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5717994718101504-fe4.pantheonsite.io
rwtinteractives.ncte.org
5130657403502592-fe4.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
cccc.ncte.org
5130657403502592-fe4.pantheonsite.io
secure.ncte.org
5717994718101504-fe4.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
buildyourstack.ncte.org
5645012914143232-fe3.pantheonsite.io
build-your-stack.ncte.org
5680163505307648-fe4.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
2021convention.ncte.org
helpdesk.ncte.org
5717994718101504-fe4.pantheonsite.io
5717994718101504-fe4.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
5717994718101504-fe4.pantheonsite.io
5717994718101504-fe4.pantheonsite.io
5645012914143232-fe3.pantheonsite.io
helpdesk.ncte.org
5732095699714048-fe1.pantheonsite.io
5717994718101504-fe4.pantheonsite.io
status.ncte.org
5717994718101504-fe4.pantheonsite.io
5645012914143232-fe3.pantheonsite.io
blog.ncte.org
5693048138760192-fe2.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5680163505307648-fe4.pantheonsite.io

Certificate

The complete raw certificate details for verse.ncte.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f+tiWH0D5N0kegQvrgn
3AhaDHXtvERVMTCVnXXCPWOt/sPf9u6wjqkWh+kXyLvHMuR5hmt4WZFxksMS6eSg
lNlMVwvPeDII/8dPfQHH32P3i81cklGQsZOQdOvZFIgtp0tdv2O5cKj2uJDRrn9I
R3TBxMU6xsjGW3J6J1cE8Y2y7+CcLd96466Z7U8KMdvmiqBRbDwJxgCLZHTuWoHy
G8VzkhERwX6kznDJQMugN8ztevq+A7I7WJpMHqLe8msJKeqQcqZ+thZMG0grflUJ
oX7nyyZRXcp7xtcDcBBRsk5PGAqvzcp4FlQQ8Oh1utU88rT+jYaYw4syvMqOYO+m
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16105100567183349359000717961282709753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'verse.ncte.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26509885198368339632072161414515291375243946099970568289841534701363791368640773281954220454734500170680092671481334261953942852644101326669171702822019264899003235386770115318649425956218569234309244676256418632162268529318144975161670350804969412373779990092210435278353570869606954642002534802573094964407176027761725414011714989725460104107619696385642957436380310587540833987039243608748700842511990911085035221696884684313389339906601210750591342868668287901306646508609898555453129925604989349665088909148557424273355041333435125100864576722629262082448128977710182492559296342711888192439618449823513892070989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4b0ec0b1057ad656f1126b18572d5c8611cd32b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verse.ncte.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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