shibprod.alamo.edu

- Alamo Community College District -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 1d:62:fd:77:d6:f6:56:04:11:41:54:2f was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Alamo Community College District

Organization: Alamo Community College District
State / Province: Texas
Locality: San Antonio
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:62:fd:77:d6:f6:56:04:11:41:54:2f
Serial Number (int): 9094736984513613987672314927
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: bb:3b:ca:8b:7c:f3:c4:7a:c9:8c:21:42:50:89:f1:c9:4b:46:49:b1
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): fe:af:92:68:a9:45:8f:dc:1e:20:09:2a:aa:53:12:30:b4:40:b7:ca
Fingerprint (sha256): 28:d1:17:83:86:b3:b3:8d:58:e1:99:63:fd:34:80:56:29:25:7f:56:da:2f:ad:31:10:c8:17:56:dd:61:f4:1e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate shibprod.alamo.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shibprod.alamo.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shibprod.alamo.edu

Other certificates including the domain name alamo.edu

(limited to 100 certificates)
alertus.alamo.edu
boardphotos.alamo.edu
tls.automattic.com
coursefind.alamo.edu
alamoast1.alamo.edu
ststest.alamo.edu
*.nvcproxy.alamo.edu
vpn.alamo.edu
tls.automattic.com
lum010.alamo.edu
mysaccatalog.alamo.edu
myalamocatalog.alamo.edu
spcmax.alamo.edu
nlcproxy.alamo.edu
inet.alamo.edu
dstgoprint.alamo.edu
rome.alamo.edu
san-23-s12.tlsprovisioning.exacttarget.com
wwwsecure.alamo.edu
dgwprod.alamo.edu
tableau.alamo.edu
SACWEB01.sac.alamo.edu
sacweb03.sac.alamo.edu
xe9appt.alamo.edu
phoenixss.alamo.edu
vpn.alamo.edu
wsecure.alamo.edu
ssomgr.alamo.edu
sacweb03.sac.alamo.edu
sts.alamo.edu
alamoaces.alamo.edu
sacweb01.sac.alamo.edu
dgwprod.alamo.edu
spcezproxy.alamo.edu
nvclibanswers.alamo.edu
stsalamo.alamo.edu
DIST-4750.ALAMO.EDU
spcezproxy.alamo.edu
login.alamo.edu
fortimail.alamo.edu
alamoinb1.alamo.edu
lpldap.alamo.edu
proxy.nvc.alamo.edu
im.alamo.edu
spcweb.alamo.edu
*.alamo.edu
ssomgrhr.alamo.edu
wwwsecure.alamo.edu
survey.alamo.edu
sacweb03.sac.alamo.edu
nvcchatbeacon.alamo.edu
hermes.sac.alamo.edu
lpadmin.alamo.edu
lpadminhr.alamo.edu
shibprod.alamo.edu
conference.alamo.edu
lum009.alamo.edu
footprints.alamo.edu
fortimail.alamo.edu
library.alamo.edu
fortimail.alamo.edu
www.alamo.edu
proxy.nvc.alamo.edu
*.alamo.edu
opentouch.alamo.edu
pacpx.alamo.edu
phoenixss.alamo.edu
testmobile.alamo.edu
lpadmintst.alamo.edu
aces.alamo.edu
shibtest.alamo.edu
lum009.alamo.edu
aces.alamo.edu
nlcproxy.alamo.edu
nlcproxy.alamo.edu
maps1.alamo.edu
sts.alamo.edu
axiomprod.alamo.edu
115252.alamo.edu
shibprod.alamo.edu
nlcweb.alamo.edu
ems.alamo.edu
aces.alamo.edu
testportal3.alamo.edu
mail.alamo.edu
alamomobile.alamo.edu
sacweb01.sac.alamo.edu
tls.automattic.com
web.nvc.alamo.edu
mfa-tvp01.alamo.edu
web.nvc.alamo.edu
web.nvc.alamo.edu
sacweb03.sac.alamo.edu
nvcportal.alamo.edu
conference.alamo.edu
alamo.edu
peproc.alamo.edu
shibprod.alamo.edu
nlcproxy.alamo.edu
sacchat.alamo.edu

Certificate

The complete raw certificate details for shibprod.alamo.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+rqRez/zWVEpTwpfDQf
/DvUektESRrZtnT1X/qLIWjRFks0I60pFE496N+11ELRh/g2HdHkP2MqZOKK3MIJ
8ceovO7oHjUEhjNFzbehCsLGvnN99AgBxqhRrL78MB3/ZnOTKglCvSb8tW85v4HT
qCJbWYVTFrfTlkFLO5Zcn6KN0Awo6ynDh7HgQUQ9b4p9fksJZl6FWqvaO1JL6KGN
NMIZ8lU/QZFM3UU2H9bwF0qTsv8wVGpRL70ztPncERvOQGX95C4aiGDpFr9xERtD
/qyb3hEbuB4hKKPdWZuQ0zas4tgin0mTstTZcHtlLZ1R6BuAbrDGVF/8o07fAMsR
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9094736984513613987672314927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 18:04:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-18 17:06:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Antonio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alamo Community College District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shibprod.alamo.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25237263656045580848131015102185757702092960525623607943738940500509123551967897477394412870928386905187446826748575272151734528627076724143437668147712452721183640566476602070413467077745184855167881766627391959138261704528967239741773570343466549146801636021084136130542617460740798716372234593476038727439824632291214837279959009172585976191583870957208346336515808955225556783040154594204505135277792164974349786879221908374015366061396277351293069876647314072866262426398608505710959961244557035619163526327086900317057735633041698571626440976395360825576892704832515535368728548687565057599486233855079517721027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shibprod.alamo.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb3bca8b7cf3c47ac98c21425089f1c94b4649b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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