umneonara.surfnet.ca

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 4a:fc:c6:ef:19:59:55:fc:b2:58:b4:65:8b:58:f9:f7 was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=umneonara.surfnet.ca

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:fc:c6:ef:19:59:55:fc:b2:58:b4:65:8b:58:f9:f7
Serial Number (int): 99675365356912040803253133042710542839
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 49:98:08:68:30:2a:bc:b0:45:2a:ff:b2:e7:17:77:50:1b:9e:92:d9
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): a5:88:e3:3e:04:d4:ea:96:82:46:fb:87:91:eb:f5:5f:8b:9b:ae:43
Fingerprint (sha256): 30:db:d5:3a:47:7c:aa:7f:97:95:1e:4e:e4:06:68:19:d2:af:17:09:9d:40:b7:f8:af:c1:60:9a:7f:3c:08:f7

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate umneonara.surfnet.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for umneonara.surfnet.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

umneonara.surfnet.ca

Other certificates including the domain name surfnet.ca

(limited to 100 certificates)
piets.surfnet.ca
eazytex2.surfnet.ca
umneonara.surfnet.ca
piets.surfnet.ca
beerlover.surfnet.ca
2bali.id
piets.surfnet.ca
erik.surfnet.ca
ilovecanada.surfnet.ca
kyerenue.surfnet.ca
piets.surfnet.ca
melkyalle.surfnet.ca

Certificate

The complete raw certificate details for umneonara.surfnet.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/LwfJfXVNUtbCn3V31C
5es3m9zIIFzmPIF4Ph0ROmH+j4AKtsjAPHv4OZ1CP03nt34pK1+mK3MXIy2jV7BQ
gdcc/jxcppA3SbZ7HgUr1ixzfmmvqMvHMOvVvhjxxWIWYz4dEI99hmphCLHqPjPH
mRccS61nRaB45o1qdUxYtdZd+m/epud+ntITzM0diw46vbcfUT5BAPKPAeAdIWFe
rmUIiwAaE/68Z6+FZoLsVQfrVg/27AGTuQWK+O4LZ5y8ohvTDZeinrbtRbRQYg7y
yHOqDFp6oMS9YiPSulcuWNjEmozVGpVOzMjOucV/cbCJo8yJTIFS7bJWlYvUbcJH
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 99675365356912040803253133042710542839
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-24 15:32:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-08 15:32:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'umneonara.surfnet.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19686735153369627171531513225231856739742424892328038009091262752612553679493923125298783822558498256591038174587511662951008516601643044515267953090505223666085824601013187860684580879502804526330306624092337280905973175374692945475040740178239417674285555753229994824609115994758659797205509514943005136547821107959746582786858049378642849733378712600231524186600700712057503560972451012337099544883617737786660816752130550039455637750287397973145393697755629310792162727730737242240954040140506109918368701493389299135102545201255966116438464198858105332046530853022333891800975960783586997697118814783751535609717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umneonara.surfnet.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49980868302abcb0452affb2e71777501b9e92d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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