wiki.cheekwood.org

- Cheekwood Botanical Garden and Museum of Art -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:27:eb:8f:e4:2d:17:8f:34:8d:4c:e1:9a:6b:db:7d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cheekwood Botanical Garden and Museum of Art

Organization: Cheekwood Botanical Garden and Museum of Art
Organization unit: IT
State / Province: Tennessee
Locality: Nashville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:27:eb:8f:e4:2d:17:8f:34:8d:4c:e1:9a:6b:db:7d
Serial Number (int): 10841101310263378100342659237867674493
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 47:69:f2:cc:ed:3d:5c:2b:11:43:2c:f6:c9:f0:ea:cd:b8:88:0a:12
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 3f:32:78:6f:7a:7a:16:04:e2:b8:2d:a8:fc:7d:4c:dc:c4:5d:25:5f
Fingerprint (sha256): 24:43:7f:de:80:47:e4:14:e2:9f:ba:29:d3:0b:55:e1:66:0f:81:5d:ee:2c:f0:f5:d3:1b:0c:53:d4:4b:a5:f2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate wiki.cheekwood.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wiki.cheekwood.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wiki.cheekwood.org

Other certificates including the domain name cheekwood.org

(limited to 100 certificates)
cheekwood.org
remote.cheekwood.org
cheekwood.org
staging.cheekwood.org
jira.cheekwood.org
cheekwood.org
docs.cheekwood.org
wiki.cheekwood.org
images.cheekwood.org
cheekwood.org
docs.cheekwood.org
wiki.cheekwood.org
cheekwood.org
wiki.cheekwood.org
*.cheekwood.org
*.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
passwordreset.cheekwood.org
wiki.cheekwood.org
wiki.cheekwood.org
openvpn.cheekwood.org
jira.cheekwood.org
*.cheekwood.org
wiki.cheekwood.org
images.cheekwood.org
mail.cheekwood.org
www.cheekwood.org
mail.cheekwood.org
pics.cheekwood.org
xibo.cheekwood.org
docs.cheekwood.org
jira.cheekwood.org
share.cheekwood.org
wiki.cheekwood.org
wiki.cheekwood.org
wiki.cheekwood.org
jira.cheekwood.org
filecloud.cheekwood.org
www.cheekwood.org
wiki.cheekwood.org
xibo.cheekwood.org
www.cheekwood.org
openvpn.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
docs.cheekwood.org
wiki.cheekwood.org
cheekwood.org
wiki.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
cheekwood.org
cheekwood.org
jira.cheekwood.org
images.cheekwood.org
jira.cheekwood.org
www.cheekwood.org
passwordreset.cheekwood.org
images.cheekwood.org
wiki.cheekwood.org
www.cheekwood.org
cheekwood.org
wiki.cheekwood.org
mail.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
cheekwood.org
cheekwood.org
wiki.cheekwood.org
xibo.cheekwood.org
xibo.cheekwood.org
images.cheekwood.org
jira.cheekwood.org
cheekwood.org
images.cheekwood.org
mail.cheekwood.org
wiki.cheekwood.org
docs.cheekwood.org
ec2.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
mail.cheekwood.org
*.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
cheekwood.org
ec2.cheekwood.org
images.cheekwood.org
cheekwood.org
cheekwood.org
cheekwood.org
images.cheekwood.org
images.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
images.cheekwood.org
wiki.cheekwood.org
jira.cheekwood.org

Certificate

The complete raw certificate details for wiki.cheekwood.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVGEfIkrp+4pBFcayYUC
08fSLIIUmqKgUEaDUAzSP60Mtml4O5MKa3pA/aSi9qGATWKQB5hxpRn7Y9GOlMMl
d5j/92Gq8W1lCSyT88lWr8vUVj9Qgh3Nyu8CItoGHsnN3jT8RCoHziMLO1F0Z+A7
A7lPiii1iTHfQXINuFmUurRGN+86rBViybVH6KvFJmgyhNevwDdtlot8iFXpeo6n
SylDQV+ErfGE2Tx+dnV0bpxSPWxIbPAt8eX29WLoqN5MnJq15ygnfOO1FodoFZCn
rgkqtV7GnKUJeN/LWfwq60KrZYmdiqJsRcsM0eSYqfXwbL7RM6Ad86XpMnLTJRGd
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10841101310263378100342659237867674493
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nashville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cheekwood Botanical Garden and Museum of Art'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wiki.cheekwood.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21879424549028876305572634217778471993227134384479202734378169801359669245398282965363964798029826670967511568205884515504557693464845032165874470119622048830548871695690901545272453410341812967038977017536437767056607624193083525535319594238125097033701872742063277408226034966474754635544127575511239814891595823549988981387693056272595557079980346295080213566863737467001120033991298905325066447341788278469944991887006539303951658945333988281395220158328719361850715108093666533462723965508238064046292057196692715600546790281296981530895529367275299013448576920364807199677174459220049886698202223922000243563827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4769f2cced3d5c2b11432cf6c9f0eacdb8880a12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.cheekwood.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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