giving.cofc.edu

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 0c:dd:18:f2:06:a7:65:4f:02:3e:56:c3:17:0f:0c:d3 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=giving.cofc.edu

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:dd:18:f2:06:a7:65:4f:02:3e:56:c3:17:0f:0c:d3
Serial Number (int): 17098739508260282560083723958071790803
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2e:23:e1:b5:c2:81:95:b1:1a:18:a3:ea:d6:3d:b1:58:05:68:c5:f5
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 6d:fc:a3:ac:d3:a6:3f:f3:03:e1:02:f2:ee:6e:91:b9:d6:95:26:9f
Fingerprint (sha256): 1c:44:ff:c0:4a:50:2c:89:e0:2f:1d:7a:63:c0:7d:79:80:41:cd:26:b5:58:cf:c1:5b:02:5f:9a:86:62:76:f5

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate giving.cofc.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giving.cofc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giving.cofc.edu
www.giving.cofc.edu

Other certificates including the domain name cofc.edu

(limited to 100 certificates)
foundation.cofc.edu
*.cofc.edu
givingisgorges.org
*.cofc.edu
*.cofc.edu
*.cofc.edu
*.cofc.edu
discovering.cofc.edu
*.cofc.edu
givingisgorges.org
scnasaepscor.cofc.edu
bejih.com
givingisgorges.org
*.cofc.edu
*.cofc.edu
*.cofc.edu
www.thesocietypages.cofc.edu
*.cofc.edu
*.cofc.edu
*.cofc.edu
*.cofc.edu
fmgis.cofc.edu
giving.cofc.edu
friendsof.cofc.edu
*.library.cofc.edu
*.dev.cofc.edu
*.cofc.edu
*.cofc.edu
250drive.cofc.edu
*.cofc.edu
nrostatic.com
*.cofc.edu
*.cofc.edu
community.cofc.edu
*.cofc.edu
*.test.cofc.edu
*.cofc.edu
foundation.cofc.edu
*.cofc.edu
edge-uc1.peopleadmin.com
foundation.cofc.edu
*.cofc.edu
answers.library.cofc.edu
fallalumniweekend.cofc.edu
*.cofc.edu
250drive.cofc.edu
alumnijobs.cofc.edu
foundation.cofc.edu
ssl7124.cloudflare.com
owa.cofc.edu
*.cofc.edu
aasdsloth.gsm.cornell.edu
*.cofc.edu
community.cofc.edu
halsey.cofc.edu
hpc.cofc.edu
answers.library.cofc.edu
pascal-cofc.library.cofc.edu
*.cofc.edu
*.cofc.edu
apop.library.cofc.edu
*.cofc.edu
*.battery.cofc.edu
250drive.cofc.edu
*.cofc.edu
*.cofc.edu
250.cofc.edu
*.cofc.edu
*.cofc.edu
*.cofc.edu
libcal.library.cofc.edu
diversityconference.cofc.edu
*.cofc.edu
*.cofc.edu
community.cofc.edu
myportal.cofc.edu
*.nuncio.cofc.edu
scspacegrant.cofc.edu
givingisgorges.org
friendsof.cofc.edu
*.cofc.edu
*.cofc.edu
mrl.cofc.edu
*.cofc.edu
acaweekend.cofc.edu
hub.cofc.edu
friendsof.cofc.edu
foundation.cofc.edu
givingisgorges.org
*.cofc.edu
yearofwomen.cofc.edu
edge-uc1.peopleadmin.com
*.cofc.edu
*.nuncio.cofc.edu
auth1.cofc.edu
*.library.cofc.edu
*.cofc.edu
*.cofc.edu
giving.cofc.edu
*.cofc.edu

Certificate

The complete raw certificate details for giving.cofc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5481hh8R1bfwhZ4jDAib
5RQeKrWkxcpEBxODlGwsyxkGzpBce+4Cl3JgGFuVgp6L2JZiSIVTuCPh2ZVV60Sw
S5hi3D/hJb7eugYcKooYcCR5/bSSGLXid4VXstQUta/0mAmux7R7kZtvquddezDX
RAcYhvYnCFBU9uWhsXajC9TQf0VaVBMwQGjPOEuWB4aKZduV6OcMX6D5I5fxUU03
/J2tH/c/pu/RJxIV5oCOANXcubiduJAwKKztEJDQwmlpmVBVIg5wIBp22Oobx9/S
VPkZZHwlz4xcOxDaNmG/fHPLh7askzMUDztXgrliLW/L5Gs0crAFIYt7s7v3X8wN
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17098739508260282560083723958071790803
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giving.cofc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29231667475419905220050457223318666885292313122939383565866323609950688017147683903000467051277516413836308257046522771624406234927720370882561501446053928714011565805961908777341543188480771978127934488408532441713775670920939868665849001269960073093812771065778999785596512838953232818025330301666455558097877154372392211005512321020078553023363613855957476342060248952741258913039830289819318406724588702580676851828705660942221433239490957775816750383760837582389004098732806355725157407237332034451624475610437665758694890322828754120641607190567322440457272515547661191116181726182299185921096177317865939799461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e23e1b5c28195b11a18a3ead63db1580568c5f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.cofc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving.cofc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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