*.whitworth.edu

- Whitworth University -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 18:36:67:79:33:b6:77:7a:6d:41:ec:00 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Whitworth University

Organization: Whitworth University
State / Province: Washington
Locality: Spokane
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 18:36:67:79:33:b6:77:7a:6d:41:ec:00
Serial Number (int): 7493410869501537226540051456
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 17:31:e1:da:ab:ee:09:56:96:ce:5e:05:6e:4f:14:88:31:4b:31:00
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 40:29:8f:b3:38:25:6b:71:fd:7f:45:61:1f:3d:89:2c:36:42:df:08
Fingerprint (sha256): 2a:5b:63:78:4b:b9:49:0b:e7:6c:19:2a:97:42:a1:23:b1:ad:8d:f1:71:c0:64:56:39:35:dc:3f:f0:58:a5:b8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.whitworth.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.whitworth.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.whitworth.edu
whitworth.edu

Other certificates including the domain name whitworth.edu

(limited to 100 certificates)
cluster3.technolutions.net
cluster3.technolutions.net
blackboard.whitworth.edu
cluster3.technolutions.net
apiprod.whitworth.edu
digitalcommons.whitworth.edu
nextcatalog.whitworth.edu
cluster3.technolutions.net
*.whitworth.edu
cluster3.technolutions.net
editcatalog.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
connect.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
connect.whitworth.edu
cluster3.technolutions.net
nextcatalog.whitworth.edu
cluster3.technolutions.net
digitalcommons.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
connect.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
digitalcommons.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
apiprod.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
clearpass.whitworth.edu
cluster3.technolutions.net
radius.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
serve.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
learn.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
libguides.whitworth.edu
us-east-1-san2.blackboard.com
us-east-1-san2.blackboard.com
cluster3.technolutions.net
connect.whitworth.edu
digitalcommons.whitworth.edu
*.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
ccm1-ms.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
www.whitworth.edu
serve.whitworth.edu
*.whitworth.edu
apply.whitworth.edu
cluster3.technolutions.net
news.whitworth.edu
cluster3.technolutions.net
mail.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
libguides.whitworth.edu
apply.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net

Certificate

The complete raw certificate details for *.whitworth.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0yqPSOGp1FcII9wLp9u
p+sDLVc1yKxkiP9tQXQTs/gOBDzVbMy8CAl86J6n3U4zGg1fj/6OiSt0PnpmGgb+
AM/lA8fmNxw6jcDRT++dsuv/+6kLZyzzIZIhotNH/LicTc738aNP1ugnX3CLQdKK
csUYSxyU+P0+m9MsgP1sR8KqGaL0hOOJF2cMKnrt+IC/nnc9ypg3GWJlMRNKeRvu
gFshNZtzRxZCe4f2Lw6X0VtXBlh8yL/7n3UdzimlBRty5Pd0F2EiGryL1hvIQxDR
Jx855hphIiNAPT8zizUOAIgJGw+dGJV+3u73EYZTxnE7wgMq6v6LeIFq4lYFkLU7
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7493410869501537226540051456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 17:48:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-11 14:27:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Spokane'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Whitworth University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.whitworth.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24149321166759333786575737711852724414178423398232728579286773569162482871661348255243357096574100875713487884826022879471853623086451593045395357821401777187503620176998452974216804526882675127609214201881740043218042701764615307272757243331018238445448709847436264789368061199926895500569901821657366371464311974746692610747479077872633305183110412313118284822712480338663730298140139111059506548851578133592601621606130602185686787634641400252711596858372141184303071352503118125206021119026643745383884491501387766732673141802556915820987956750932272014166951689126076127348142725244129460529136780621981496458087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitworth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitworth.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1731e1daabee095696ce5e056e4f1488314b3100
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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