*.jasig.org

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 13:f3:45 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=qteVGrDgZPOgEUPT22xQkVUKNI-uy1nf,CN=*.jasig.org,OU=GT91840987+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 13:f3:45
Serial Number (int): 1307461
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 39:74:a6:ea:50:13:f0:06:fc:92:0e:a8:34:c2:ba:8b:38:82:25:9f
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 87:b9:a0:a7:81:3f:d1:72:c5:ff:84:74:3d:c1:aa:46:af:f2:86:41
Fingerprint (sha256): 2e:af:e3:14:79:99:f4:53:88:28:a5:51:b9:55:39:76:cf:ea:78:87:b2:8e:62:2d:93:28:e4:0c:28:0c:e9:19

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.jasig.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.jasig.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.jasig.org
jasig.org

Other certificates including the domain name jasig.org

(limited to 100 certificates)
login.jasig.org
grocerylist.jamesonsaunders.com
app.speaklah.com
admin.eliteonegroup.com
www.inexpertmode.com
www.hommax.com.br
royallahaina.expressbook.io
thercc.us
test.eventchai.com
issues.jasig.org
thevaleadform.com
ephemeral-list.app
source.jasig.org
www.organizze.me
issues.jasig.org
wowdigital.io
www.paydayplay.com
issues.jasig.org
gift-cards.reactify.app
wealthsolutions.demo.titanbay.com
www.roqnet.com
www.mryu.menu
www.evidencestrahovice.eu
milao.leafnet.com.cy
www.blindreferral.com
sinteras.co
newsource.jasig.org
porto.primaverasound.app
wiki.jasig.org
www.jasig.org
lora-vn.page
source.jasig.org
apply.doxd.io
staging.healthtree.org
colony-alpha.go.colonynetworks.com
livechat.reecegordon.co.uk
www.tricolourspecialities.com
*.jasig.org
debuth.com
cedardrivingschool.ie
appapi.invenzi.com
lgtmgen.com
www.ashleyandemma.com
source.jasig.org
www.ajour.ch
dacslab.com
auth.signatureapp.io
panpacific.rabot.us
userbilling.positeasy.in
deepadmd.com
wegloo.it
www.barryplumbinginc.com
hmwrk.link
menus.beta.beewerk.com
www.estetoscopio.com.br
radio.primaverasound.app
www.haoandxiaoye.com
www.teaabus.com
earlylearnersmontessori.com
test.app.konch.ai
wiki2.jasig.org
www.arttraphotography.com
olvp.flockim.com
dev.nano.app
apply.doxd.io
www.theantiquearcade.co.za
admin.mallive.co
www.gnaane.in
webinar.nhvr.gov.au
dev.dealercurator.com
royallahaina.expressbook.io
panpacific.rabot.us
cedardrivingschool.ie
www.app.raya.io
colony-alpha.go.colonynetworks.com
gogisenyitours.net
wiki.jasig.org
smclient.maxsold.com
www.app.raya.io
peergateway.com
see.pete.run
digitalmenuboard.abacus.co
sabler.cyou
newdeveloper.jasig.org
wealthsolutions.demo.titanbay.com
carbondown.earth
sa.pacdocsign.com
staging.healthtree.org
www.teachertasha.co.uk
newwiki.jasig.org
ht.appvancing.com
rpto.ca
reyskens.org
pesquisas-avisos.alest.com.br
dev.nano.app
www.pizzaanywhere.com.au
buttons.bombers.space
smartmod.com.ve
webinar.nhvr.gov.au
app.orderbit.co

Certificate

The complete raw certificate details for *.jasig.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p/fvvrD+jKgHYoVZRxV
CpsdEe9mpnhY6YOYVQpTLG+uX1AfcxeRWml2XFtIyntTFimBiCQL0WBvCb2XWqSp
uev8IcmlVaZnxmv6zIvVyWXcq5+ASMGe5hOQZ9WssrHEisMoVdVb+VLSfHu0IIba
vXuabkNypZmQh26xmUFPB8cJmvG4oLX1vkLGOysSvtvu2He/CtZl09D0eeOAMkMy
Kn86qzKezHE7iEDtyLdZhZ+7RDtxRA50BnjOqGIL5G/Jvjv045i7EHnKFgYHbUH7
5RkCF8+LJXT3ZDLqV4c3jKgOQ2ZocdWmyBAfoVBBIfWCvE0RUAmAcsoimLx48Eof
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1307461
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-10 00:33:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-10 20:58:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qteVGrDgZPOgEUPT22xQkVUKNI-uy1nf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT91840987'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.jasig.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27093834074303826884932495134333100737630755631315711982054369912077121125908685092895164034126425782633400973153748399111951703778846897234523710500439171114200547958164474910235424087617480908334597543031102049246651404793879648520923988751951622293184598860663300707407835415513449827278282508855011273102665365997615463535785456001487701415890795626294000137303469841805863968138152145833350806098603706598171480015328800340011466402498860810744684484232482818648654247328612107618445748546451354838587234727667883356507275917388772974943272060092603720697367521248120100527148618589809970700807571294564121190367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jasig.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasig.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3974a6ea5013f006fc920ea834c2ba8b3882259f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008cf73166b8992e091d873e256ed0efdceaca032986f905374c8d4dc305dadec50d14ae407827a11bca40f38c326a376598b32c2bc75d17f965ff743464c34601ac411008d3dfe735455458a04751288a4aae1414608f7d84fbfac5fef394debd69cef510f4838d92fe9b571b924c5c517da3ee563811df6b24be794c31ef453a56f4be9d5a6b12dde1b05dd8e9872554bfa77fab782d78b714980ce63ffbf6841706e415c11920f88867fd7ca916dd681d9da80c9dcb8123ef9fbaa7cee6b445736870272fea3327ce0031f6a73b2c83de573cb3f371645b12f237e7db8aa1fab6ac5276fc57d7e0a6c30eab7d150080a742ec712efc6d398d51ba27ec21855d