*.asp.radford.edu

- Radford University -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:e6:f0 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Radford University

Company registration number: Lpkx75MhOK7w436cRiJufjnQhe4TxaOw
Organization: Radford University
Organization unit: Systems Administration
State / Province: Virginia
Locality: Radford
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e6:f0
Serial Number (int): 190192
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: af:b4:77:13:bd:83:6d:60:5c:88:93:7e:f1:26:d3:18:67:85:a6:35
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): ea:d8:52:a7:28:d4:aa:54:38:ea:a4:e4:6b:e1:09:35:33:fa:0b:1b
Fingerprint (sha256): 1c:d7:7c:df:d5:86:6d:b9:b7:80:82:65:dd:c4:7d:ad:c0:d6:49:12:e3:25:d3:b2:5e:89:88:b8:5d:5c:fc:e0

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate *.asp.radford.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.asp.radford.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.asp.radford.edu

Other certificates including the domain name radford.edu

(limited to 100 certificates)
mobile.radford.edu
holst.radford.edu
mozart.radford.edu
degree-aud.radford.edu
ssa.radford.edu
myru.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
learn.radford.edu
aceweb.radford.edu
list.radford.edu
monitor.radford.edu
ruems-dev.radford.edu
hd-wsus.radford.edu
cca-svr-30.radford.edu
sapphire.radford.edu
www.radford.edu
edge_uc3.peopleadmin.com
edge-uc3.peopleadmin.com
*.asp.radford.edu
ssb.radford.edu
support.radford.edu
sso-pprd.radford.edu
ruwireless.radford.edu
ru-data.radford.edu
webwork.radford.edu
impactlms.radford.edu
sqlteacher.radford.edu
mlad01.radford.edu
aceweb.radford.edu
ssbxe.radford.edu
www.radford.edu
edge-uc3.peopleadmin.com
esm.radford.edu
trident-pprd.radford.edu
eva1.radford.edu
eva1-dev.radford.edu
monk.radford.edu
journals.radford.edu
webapps.radford.edu
libguides.radford.edu
mobile.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
trid-adconnect.radford.edu
batch1.radford.edu
ise.radford.edu
edge_uc3.peopleadmin.com
ru-portal.portal.radford.edu
edge-uc3.peopleadmin.com
encore.radford.edu
edge-uc3.peopleadmin.com
portal.radford.edu
edge_uc3.peopleadmin.com
celearntest.radford.edu
armad01.radford.edu
author-train.radford.edu
ruems-dev.radford.edu
edge_uc3.peopleadmin.com
geog-grant.radford.edu
odyssey-web.radford.edu
sites.radford.edu
classclimate.radford.edu
wagner.radford.edu
wagner.radford.edu
bonita6-pprd.radford.edu
netappsrv1.radford.edu
gitlab.radford.edu
ldaps.radford.edu
list.radford.edu
onecampus.radford.edu
cca-svr-40.radford.edu
collegiatelink.studentvoice.com
breeze.radford.edu
appnav-pprd.radford.edu
support.radford.edu
cognos.radford.edu
*.asp.radford.edu
sso.radford.edu
my.radford.edu
tutortrac.radford.edu
myru.radford.edu
hd-wsus.radford.edu
edge_uc3.peopleadmin.com
owa.radford.edu
libguides.radford.edu
learntest.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
libguides.radford.edu
onecampus.radford.edu
lp5-beis.radford.edu
edge_uc3.peopleadmin.com
list.radford.edu
classclimate.radford.edu
journals.radford.edu
webvpn.radford.edu
trident.radford.edu
ssb.radford.edu
edge-uc3.peopleadmin.com
webvpn.radford.edu
tutortrac.radford.edu
edge-uc3.peopleadmin.com

Certificate

The complete raw certificate details for *.asp.radford.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZQoFx0ztM7RWE6mJs+b
IQSgA08t9g42yGJyY44PFLfhepCuksTHZ/hY4gi0GyNfqKBQgdWurkifgTkdVNKB
ZzU3NJk3WWrBpnbxS7eweM9ZRuogg7lma65DzCH1dy/yUhFIReO0jke4siqrzuWO
ryP/64T8YeL4KeJXVTNoYFBjFei2L9/sbuHHRtlGZYrWmC3qwOVmXitSd7YKqE0d
bRNSTgN5gaKAXBrfBjlA3iwNKDFoPZ0I5TIg2xjsTKy96bVsqxWxdKWI1vnKb//J
lqjJsb/tRzexOAWaGoWeExR78Yy0Xcy0Jqh9ci7YbAbXGhYaj+hJKt8q64rIXZV0
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 190192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-16 03:48:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-19 09:58:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lpkx75MhOK7w436cRiJufjnQhe4TxaOw'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Radford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Radford University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Systems Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.asp.radford.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23427145162445294395663663139211325126464458530226099061291463535992589622044170825646903656123681545147986452619992091678680798825761969888979870621072972910110471512014476664091765131009063188825862553779759787907347154571633081037405697089464877620784649492454872195513233021620901682197473985028021306052311022735464578386723927582805393949303416275845431150020577148448977126659445784073148405176367333261106497164010999204958864282890736336023504361793831100392608154172945696482140042445570912567470490593483983353414687229039018900880699806609857830872052891167696541504429374793587037809818013307812208538809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asp.radford.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afb47713bd836d605c88937ef126d3186785a635
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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