mail.cheekwood.org

- Cheekwood Botanical Garden and Museum of Art -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:47:8c:1d:39:3e:b5:8c:78:ca:90:6a:2c:fa:a5:3d was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cheekwood Botanical Garden and Museum of Art

Organization: Cheekwood Botanical Garden and Museum of Art
State / Province: Tennessee
Locality: Nashville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:47:8c:1d:39:3e:b5:8c:78:ca:90:6a:2c:fa:a5:3d
Serial Number (int): 8346862904343148446787924095818966333
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 83:c7:fb:ce:c7:57:27:91:2f:20:5c:52:0d:c8:9f:6d:41:98:e0:17
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 92:2e:11:d0:29:b0:1d:30:e2:b6:7c:63:17:33:71:c6:0a:6f:71:46
Fingerprint (sha256): 32:ba:e3:83:d6:20:58:44:87:c1:a3:d4:d9:40:35:42:80:e6:e6:bc:a8:6f:92:a9:08:0c:f1:f6:26:6e:5c:30

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g3.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g3.crl

Check the revocation status for certificate mail.cheekwood.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.cheekwood.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.cheekwood.org
autodiscover.cheekwood.org
owa.cheekwood.org
smtp.cheekwood.org

Other certificates including the domain name cheekwood.org

(limited to 100 certificates)
cheekwood.org
remote.cheekwood.org
cheekwood.org
staging.cheekwood.org
jira.cheekwood.org
cheekwood.org
docs.cheekwood.org
wiki.cheekwood.org
images.cheekwood.org
cheekwood.org
docs.cheekwood.org
wiki.cheekwood.org
cheekwood.org
wiki.cheekwood.org
*.cheekwood.org
*.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
passwordreset.cheekwood.org
wiki.cheekwood.org
wiki.cheekwood.org
openvpn.cheekwood.org
jira.cheekwood.org
*.cheekwood.org
wiki.cheekwood.org
images.cheekwood.org
mail.cheekwood.org
www.cheekwood.org
mail.cheekwood.org
pics.cheekwood.org
xibo.cheekwood.org
docs.cheekwood.org
jira.cheekwood.org
share.cheekwood.org
wiki.cheekwood.org
wiki.cheekwood.org
wiki.cheekwood.org
jira.cheekwood.org
filecloud.cheekwood.org
www.cheekwood.org
wiki.cheekwood.org
xibo.cheekwood.org
www.cheekwood.org
openvpn.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
docs.cheekwood.org
wiki.cheekwood.org
cheekwood.org
wiki.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
cheekwood.org
cheekwood.org
jira.cheekwood.org
images.cheekwood.org
jira.cheekwood.org
www.cheekwood.org
passwordreset.cheekwood.org
images.cheekwood.org
wiki.cheekwood.org
www.cheekwood.org
cheekwood.org
wiki.cheekwood.org
mail.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
cheekwood.org
cheekwood.org
wiki.cheekwood.org
xibo.cheekwood.org
xibo.cheekwood.org
images.cheekwood.org
jira.cheekwood.org
cheekwood.org
images.cheekwood.org
mail.cheekwood.org
wiki.cheekwood.org
docs.cheekwood.org
ec2.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
mail.cheekwood.org
*.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
cheekwood.org
ec2.cheekwood.org
images.cheekwood.org
cheekwood.org
cheekwood.org
cheekwood.org
images.cheekwood.org
images.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
images.cheekwood.org
wiki.cheekwood.org
jira.cheekwood.org

Certificate

The complete raw certificate details for mail.cheekwood.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfUH84q6v++yOf9UOTmX
9dIh1UMy5MWIBGF3KCsokGKaGio/krH8HgPl4JavogrYMxLI2U387PKPrEGxkwZU
vh2ZkqLn4/u1JsyEQziqcFMrC2ovQkzsdGT98NNcC79KeLVKyIY2aG1GzateytNg
GWMX3gdLgWIsDxNe5vwcVgLqVruJ0xWzqLm21WZ6rrDbTkt0Gh6zG/GI7f4+8fxU
YHBUnvjEXGcqSczXBh3gpMhO/ovuYNueD5yboezVPQSeorR5FtRMgulYMl09/JY0
vcDOL5Fu1h+zq7iBpukAuM65DpeOuWNiWN/CBo1TNxUiMlESwdGYEj4rpEYJ9DcR
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8346862904343148446787924095818966333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nashville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cheekwood Botanical Garden and Museum of Art'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.cheekwood.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21455102858273288344578046838502746337897814722494787418935842773597159800570069227928886683235249453021140140786785557529070557282941700755219994712124216600956099888420567102723012086284487362049026463587171447820657784155619816809310818415225192445321050111482512896154546212145582103410804109833676921082273305265453629793526169419480269060064385654631753796301198559310991310218527837749972511117236338784663196461384920243057516686428575474315334014986167219260958449375283440666983208164345946689252994345170931888936784733547921179385929171804367221098618556350300854453386907410059654272667299476614917067047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83c7fbcec75727912f205c520dc89f6d4198e017
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cheekwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cheekwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.cheekwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.cheekwood.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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