banproxyp.usi.edu

Issued by GlobalSign RSA DV SSL CA 2018

About this certificate

This digital certificate with serial number 0d:03:d8:9b:f7:cb:98:b3:58:b0:e9:73 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=banproxyp.usi.edu,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:03:d8:9b:f7:cb:98:b3:58:b0:e9:73
Serial Number (int): 4027954813397494092987951475
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: ab:5b:e7:ff:40:67:06:d1:a6:0a:fe:cd:80:6a:a1:17:4f:7b:c7:a9
AuthorityKeyId: 81:80:d6:28:79:35:4a:5b:79:35:89:39:8f:12:17:6e:11:7b:2c:11

Fingerprint (sha1): a6:7c:42:17:05:f4:36:38:56:6b:d2:79:8c:4a:1f:26:10:5c:93:d6
Fingerprint (sha256): 22:4f:68:59:3e:21:a5:4e:ce:c6:a0:64:64:e7:1b:e9:ba:f3:7a:e9:2f:4e:d4:39:63:89:fd:6e:b2:b4:d7:3d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsadvsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsadvsslca2018.crl

Check the revocation status for certificate banproxyp.usi.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for banproxyp.usi.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banproxyp.usi.edu

Other certificates including the domain name usi.edu

(limited to 100 certificates)
my.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
forms.usi.edu
forms.usi.edu
forms.usi.edu
studyabroad.usi.edu
ssb3.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
*.lib-proxy.usi.edu
tk20.usi.edu
www.usi.edu
calendar.usi.edu
linux.usi.edu
bbtsusi.usi.edu
vdir.usi.edu
studyabroad.usi.edu
online.usi.edu
www.alumni.usi.edu
linux.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
banproxyp.usi.edu
online.usi.edu
auction.usi.edu
online.usi.edu
cas.usi.edu
auction.usi.edu
helpdesk.usi.edu
online.usi.edu
mirror.usi.edu
sctssb.usi.edu
www.alumni.usi.edu
soar.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
bulletin.usi.edu
WWW.USI.EDU
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
*.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
cms.usi.edu
studyabroad.usi.edu
WWW.USI.EDU
www.alumni.usi.edu
lite.usi.edu
*.lib-proxy.usi.edu
online.usi.edu
baninb.usi.edu
online.usi.edu
bulletin.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
linux.usi.edu
outlook.usi.edu
www.alumni.usi.edu
soar.usi.edu
online.usi.edu
exchhub.usi.edu
auction.usi.edu
*.lib-proxy.usi.edu
cas-login.usi.edu
rmsweb.usi.edu
online.usi.edu
online.usi.edu
blackboard.usi.edu
calendar.usi.edu
www.usi.edu
expc.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
online.usi.edu
library.usi.edu
banssb.usi.edu
online.usi.edu
sts.usi.edu
guard.usi.edu
online.usi.edu
www.alumni.usi.edu
bbtsusi.usi.edu
online.usi.edu
cas.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
cas.usi.edu
cloud.usi.edu
sctssb.usi.edu
WWW.USI.EDU
sts.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
forms.usi.edu
*.lib-proxy.usi.edu
*.usi.edu
online.usi.edu
www.alumni.usi.edu
my.usi.edu
auction.usi.edu
cms.usi.edu
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
my.usi.edu

Certificate

The complete raw certificate details for banproxyp.usi.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WXYu/djedkx5LWLv9fG
RBSFh+x4sabX7IKX+JZA0Tl1AaYEBYAg4CVyyMhPtigE9tjqMREUOH9B+Sybdcqt
QGGaCBtb5pBS5OtI7QbbVUnpZ3gylqy7oLRpRAKLLvK3YoUBEe5aVepZ2KHasj42
9Rvo+zJdQX5Tbhh7gdtjsPB/dDdGQZYRtV3sxZAw3Q6KIzwGBtbXsx9EdAFzRccf
H5hqzo2leWVABKfVV66dD6z5FVWDyDGcNN16XL1YeOEQbkW4PHYWzRRJ/eaXBKzT
KEJi582BK/zLDQaNfVjsxJFafY9aO3HthRu3YDnAOT/o8JNSWy3CSxL5VbJ9Ranw
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4027954813397494092987951475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA DV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 16:39:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-09 16:39:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'banproxyp.usi.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28453841056583505451905561300285110376656165712597443487130869402293244377969571141852576756161177892465620183305370822564748181724492631595522476668231522726003568425991792766513451563865785689313604111559005064046174030366690835275967358823767245110017848899981120938765114031195410357606131062264830529108789756971901809981675589304264687747427537935461867499543445273824949720794947534534426187430158781460570284073716027950965155587391407786366222962170658872401392859986954747708060682581836437092434734468626753893701056979366452656531665491754396241071915231705773944282374504994484744452209480237084582735941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsadvsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsadvsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banproxyp.usi.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8180d62879354a5b793589398f12176e117b2c11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab5be7ff406706d1a60afecd806aa1174f7bc7a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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