shibtest.alamo.edu

- Alamo Community College District -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 59:25:9d:73:a6:8d:d9:74:17:58:7f:33 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Alamo Community College District

Organization: Alamo Community College District
State / Province: Texas
Locality: San Antonio
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 59:25:9d:73:a6:8d:d9:74:17:58:7f:33
Serial Number (int): 27589639674340319081509977907
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b3:00:80:3a:3f:11:a1:91:f2:29:32:fc:3f:8a:a9:d7:7f:ff:0a:70
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 9e:63:b2:68:d5:87:d1:b4:50:b2:e3:ce:70:f6:ec:05:fe:eb:f7:ea
Fingerprint (sha256): 26:4e:bb:32:b9:ac:71:99:08:3c:f2:a4:4e:24:36:76:08:30:43:c1:ba:72:93:ec:f7:0f:0b:9b:68:e2:79:89

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate shibtest.alamo.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shibtest.alamo.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shibtest.alamo.edu

Other certificates including the domain name alamo.edu

(limited to 100 certificates)
alertus.alamo.edu
boardphotos.alamo.edu
tls.automattic.com
coursefind.alamo.edu
alamoast1.alamo.edu
ststest.alamo.edu
*.nvcproxy.alamo.edu
vpn.alamo.edu
tls.automattic.com
lum010.alamo.edu
mysaccatalog.alamo.edu
myalamocatalog.alamo.edu
spcmax.alamo.edu
nlcproxy.alamo.edu
inet.alamo.edu
dstgoprint.alamo.edu
rome.alamo.edu
san-23-s12.tlsprovisioning.exacttarget.com
wwwsecure.alamo.edu
dgwprod.alamo.edu
tableau.alamo.edu
SACWEB01.sac.alamo.edu
sacweb03.sac.alamo.edu
xe9appt.alamo.edu
phoenixss.alamo.edu
vpn.alamo.edu
wsecure.alamo.edu
ssomgr.alamo.edu
sacweb03.sac.alamo.edu
sts.alamo.edu
alamoaces.alamo.edu
sacweb01.sac.alamo.edu
dgwprod.alamo.edu
spcezproxy.alamo.edu
nvclibanswers.alamo.edu
stsalamo.alamo.edu
DIST-4750.ALAMO.EDU
spcezproxy.alamo.edu
login.alamo.edu
fortimail.alamo.edu
alamoinb1.alamo.edu
lpldap.alamo.edu
proxy.nvc.alamo.edu
im.alamo.edu
spcweb.alamo.edu
*.alamo.edu
ssomgrhr.alamo.edu
wwwsecure.alamo.edu
survey.alamo.edu
sacweb03.sac.alamo.edu
nvcchatbeacon.alamo.edu
hermes.sac.alamo.edu
lpadmin.alamo.edu
lpadminhr.alamo.edu
shibprod.alamo.edu
conference.alamo.edu
lum009.alamo.edu
footprints.alamo.edu
fortimail.alamo.edu
library.alamo.edu
fortimail.alamo.edu
www.alamo.edu
proxy.nvc.alamo.edu
*.alamo.edu
opentouch.alamo.edu
pacpx.alamo.edu
phoenixss.alamo.edu
testmobile.alamo.edu
lpadmintst.alamo.edu
aces.alamo.edu
shibtest.alamo.edu
lum009.alamo.edu
aces.alamo.edu
nlcproxy.alamo.edu
nlcproxy.alamo.edu
maps1.alamo.edu
sts.alamo.edu
axiomprod.alamo.edu
115252.alamo.edu
shibprod.alamo.edu
nlcweb.alamo.edu
ems.alamo.edu
aces.alamo.edu
testportal3.alamo.edu
mail.alamo.edu
alamomobile.alamo.edu
sacweb01.sac.alamo.edu
tls.automattic.com
web.nvc.alamo.edu
mfa-tvp01.alamo.edu
web.nvc.alamo.edu
web.nvc.alamo.edu
sacweb03.sac.alamo.edu
nvcportal.alamo.edu
conference.alamo.edu
alamo.edu
peproc.alamo.edu
shibprod.alamo.edu
nlcproxy.alamo.edu
sacchat.alamo.edu

Certificate

The complete raw certificate details for shibtest.alamo.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgiJu4YNYCWiWE0T315W
tY8xubu3vjPZAYhu7dgZFPFIBirREGiwlSaS+fCasghFas5gthxV/bO86GoNrCYh
mRZbe/O/jvPM9On7G1wuNdHPQBSbv64F+LferUkvUwXP4AHmIzgYIGv240S+Wk+i
fZHycbI/cWgQkGBO3cIBuROeoQ8NGSgYzBOqtA3vkxkLUQo2Py7Fkvvm372e/cjN
gWHKR7bD78Zba8ee83KyFfeh00o8LfdamLLo/2FMgS6k2HMDIkdXsmKivHD4CPRE
hkXzhX+dd11Hhv+5lr/vPSxWrzfz3Ycdf00qNRXM1ESdqQ1Sl2VVt+80iqAFWHoS
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27589639674340319081509977907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-16 16:16:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 16:16:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Antonio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alamo Community College District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shibtest.alamo.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23989488196964605076439096765682365603600274003683546277460921645313417952458601780116432978021228693347714617525748464825686110877089530185910407111935610299502920348513780190115283985635115689122445162894803027836809774993951595711374530022732751707998642029431873810788343962033190465402945086872424815002123159875928623314977374919839288383739392449899593189237706404560247506621318244329177248088760459864221024821005524795263647305983289393732535425413142150022411280147376722173606059499127128724111598087634084056047471927616365624226869716313510825012032338611585672506002626077627197114848371192631721071181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shibtest.alamo.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b300803a3f11a191f22932fc3f8aa9d77fff0a70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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