*.usantotomas.edu.co

- Universidad Santo Tomás -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:18:99:36:13:ee:7a:17:1a:de:e9:01:ab:4c:ef:58 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universidad Santo Tomás

Organization: Universidad Santo Tomás
Locality: Bogotá
Country: CO

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:18:99:36:13:ee:7a:17:1a:de:e9:01:ab:4c:ef:58
Serial Number (int): 12090774579827729281664192359825207128
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 86:4d:32:c9:0f:c6:1e:52:be:a2:1b:27:7b:03:30:b4:d8:b8:3d:35
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 66:95:fe:bf:55:f6:ba:73:5b:3e:d5:8a:bc:58:5b:13:20:00:96:62
Fingerprint (sha256): 1f:4e:46:45:25:a1:db:23:8c:19:32:6e:fc:6f:1d:e5:e4:4d:ae:3f:93:eb:15:99:f7:61:56:49:fa:9b:9b:16

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.usantotomas.edu.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.usantotomas.edu.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.usantotomas.edu.co
usantotomas.edu.co

Other certificates including the domain name usantotomas.edu.co

(limited to 100 certificates)
craibooklick.usantotomas.edu.co
*.crai-ustadigital.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
mesadeayuda.usantotomas.edu.co
zonedirector.usantotomas.edu.co
centrodesoporteacademico.usantotomas.edu.co
bucket.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
centrodesoporteacademico.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
mesadeayuda.usantotomas.edu.co
craibooklick.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
capacitacioncsa.usantotomas.edu.co
*.usantotomas.edu.co
craibooklick.usantotomas.edu.co
capacitacioncsa.usantotomas.edu.co
craibooklick.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.crai-ustadigital.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
craibooklick.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co

Certificate

The complete raw certificate details for *.usantotomas.edu.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2miQGlrHCpk9AcblP3MX
MkupOK/xEMjsT31xixJwrcvg3Xdz4Osc6stdjfKelDAvsnglUUps5GzF3YgizaDW
Ild0/BBekHkYwKF16XzxFa5QsYVDytlCe8DdVyAP8MBfDd88uQ/jjDpwHkRQBhyg
yEbXW5f8Hy6QCqXmNT2pTGmSi5B2YW0Uwn1krDjljWnkVFJIpCQsRwNsmKfhHfkR
TIRl43j44f8FZgY8OsqsngwClkRKiKJnYZbDs6N0DSDNPuDO9BXgpQU2O/KNFF2a
eZ9McNxMPPojTG1/Lz9hZ/BMv/rHEi04wtJ9M+X7tZBi2K49awNOeWujtQOOlb1m
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12090774579827729281664192359825207128
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bogotá'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universidad Santo Tomás'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.usantotomas.edu.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27571512371383569271590067327757973228432407875668224394197247862277678768787296022939899457636330998150387040593060932325097734273909018312716689973554267256783145214310193241682015312492426551648700337982882851622258035390394927201572055726948534084127265670592097412475831220588308847432796557430569233734463983928811778619110682944828275581509953910941695678894884873500922457741603079505507587433616423197487173313668136213180882549065524958759813902888305820171591722654139450583707510582575630121249004573138056907750089241593121446908909737198974522354813671952372895262953782661371265543437300868143501895247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							864d32c90fc61e52bea21b277b0330b4d8b83d35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usantotomas.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usantotomas.edu.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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