cca-svr-40.radford.edu

- Radford University -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:8b:55 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Radford University

Company registration number: ecas-f0dxuyCeLLzhHpN4gZzik7lOmCm
Organization: Radford University
Organization unit: ITNS
State / Province: Virginia
Locality: Radford
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:8b:55
Serial Number (int): 101205
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 49:f2:a7:b6:87:84:c8:b6:20:2f:58:af:54:49:44:c6:63:1c:fa:54
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): e9:e2:9f:32:a7:6a:30:b0:42:ce:b7:29:5a:e1:bf:a8:d9:98:8a:e6
Fingerprint (sha256): 1a:ed:2c:72:ab:ca:12:2c:58:46:d2:c9:ef:4d:5e:4d:b1:ba:ba:ad:e0:c4:a9:a3:c3:5e:4b:4a:8c:2d:a1:e9

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate cca-svr-40.radford.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cca-svr-40.radford.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cca-svr-40.radford.edu

Other certificates including the domain name radford.edu

(limited to 100 certificates)
mobile.radford.edu
holst.radford.edu
mozart.radford.edu
degree-aud.radford.edu
ssa.radford.edu
myru.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
learn.radford.edu
aceweb.radford.edu
list.radford.edu
monitor.radford.edu
ruems-dev.radford.edu
hd-wsus.radford.edu
cca-svr-30.radford.edu
sapphire.radford.edu
www.radford.edu
edge_uc3.peopleadmin.com
edge-uc3.peopleadmin.com
*.asp.radford.edu
ssb.radford.edu
support.radford.edu
sso-pprd.radford.edu
ruwireless.radford.edu
ru-data.radford.edu
webwork.radford.edu
impactlms.radford.edu
sqlteacher.radford.edu
mlad01.radford.edu
aceweb.radford.edu
ssbxe.radford.edu
www.radford.edu
edge-uc3.peopleadmin.com
esm.radford.edu
trident-pprd.radford.edu
eva1.radford.edu
eva1-dev.radford.edu
monk.radford.edu
journals.radford.edu
webapps.radford.edu
libguides.radford.edu
mobile.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
trid-adconnect.radford.edu
batch1.radford.edu
ise.radford.edu
edge_uc3.peopleadmin.com
ru-portal.portal.radford.edu
edge-uc3.peopleadmin.com
encore.radford.edu
edge-uc3.peopleadmin.com
portal.radford.edu
edge_uc3.peopleadmin.com
celearntest.radford.edu
armad01.radford.edu
author-train.radford.edu
ruems-dev.radford.edu
edge_uc3.peopleadmin.com
geog-grant.radford.edu
odyssey-web.radford.edu
sites.radford.edu
classclimate.radford.edu
wagner.radford.edu
wagner.radford.edu
bonita6-pprd.radford.edu
netappsrv1.radford.edu
gitlab.radford.edu
ldaps.radford.edu
list.radford.edu
onecampus.radford.edu
cca-svr-40.radford.edu
collegiatelink.studentvoice.com
breeze.radford.edu
appnav-pprd.radford.edu
support.radford.edu
cognos.radford.edu
*.asp.radford.edu
sso.radford.edu
my.radford.edu
tutortrac.radford.edu
myru.radford.edu
hd-wsus.radford.edu
edge_uc3.peopleadmin.com
owa.radford.edu
libguides.radford.edu
learntest.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
libguides.radford.edu
onecampus.radford.edu
lp5-beis.radford.edu
edge_uc3.peopleadmin.com
list.radford.edu
classclimate.radford.edu
journals.radford.edu
webvpn.radford.edu
trident.radford.edu
ssb.radford.edu
edge-uc3.peopleadmin.com
webvpn.radford.edu
tutortrac.radford.edu
edge-uc3.peopleadmin.com

Certificate

The complete raw certificate details for cca-svr-40.radford.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf1f+b8rEN7kQx4A/+MD
CT5GUtx2X/yEFU9VIOZ4CJBLa1EQ/OKtOnP/5gtGzdylr5wOcuic2ZU1KIH5ILdW
s7Ary0jG2ADDbdToFUFSRmczEu/SV9ZHkYlApRN7TBKEibtvAz4/x0qleVKwFfb0
k+khWzxKjy1dhrTpVF0cJBs9DioRxvgHivt4kEQCttFor1AJbOE0dZnobl460zq4
orJDaj4e44d3Q5B+4xOD6FZNrqASqLy95Kk7Zx/UudA3Nf59edqJyyJNe/5dprTj
zO+l1uHMrvDMNHezT/NOV2dCCs7EqGIFzQeq5kQsLm2QoMLAz/mqR30HnH0dD4tN
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-14 23:23:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-15 19:11:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecas-f0dxuyCeLLzhHpN4gZzik7lOmCm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Radford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Radford University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITNS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cca-svr-40.radford.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25498843120347679927735380923663278767377227993007169584696392653643573963035903172047132229869959900832204144648225747214960932521243412177823005696027182779886059322237089261111496488686191616731856220464784047259017640074410609090192086623481518745217464907939621054422135221526495427219405026958542477377566564149119546207960258777316490941517833850526354625666362292429944572707062287218604148087925383138538759305161324686438010759544161896905988456301765586117896045910282720900794088484318192211290327923425316089777174855519452656586854122824721047756187331202437575019938800184441666950925624160670156803551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cca-svr-40.radford.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49f2a7b68784c8b6202f58af544944c6631cfa54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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