*.grcc.edu

- Grand Rapids Community College -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number dd:2b:4d:e2:34:0b:8c:61:00:00:00:00:58:08:c8:f6 was issued on by AffirmTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Grand Rapids Community College

Organization: Grand Rapids Community College
State / Province: Michigan
Locality: Grand Rapids
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): dd:2b:4d:e2:34:0b:8c:61:00:00:00:00:58:08:c8:f6
Serial Number (int): 293984235500594796517498593139638192374
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 58:a1:78:56:de:eb:62:e4:16:f4:90:d1:57:07:3b:1b:04:9e:69:ee
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): 8a:6a:05:f6:86:94:66:98:07:0b:da:83:5d:c6:c1:82:49:2a:de:b3
Fingerprint (sha256): 38:ae:08:8b:e9:ed:be:c7:fb:f7:ef:0f:cb:9a:a0:10:38:de:5d:50:9e:25:71:57:1b:30:d6:75:24:f2:48:3c

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate *.grcc.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.grcc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.grcc.edu
grcc.edu

Other certificates including the domain name grcc.edu

(limited to 100 certificates)
papercut.grcc.edu
5178081291534336-fe1.pantheonsite.io
hrprod.grcc.edu
5178081291534336-fe1.pantheonsite.io
5762952716091392-fe3.pantheonsite.io
pspt.grcc.edu
grccwireless.grcc.edu
SCCM.AD.GRCC.EDU
mydesktop.grcc.edu
webnow.grcc.edu
mydesktop.grcc.edu
eprint.grcc.edu
ccsurveys.grcc.edu
epupg1.grcc.edu
eprint.grcc.edu
bb.grcc.edu
bbadb1.grcc.edu
dworksmove.grcc.edu
ACS.grcc.edu
ACS.grcc.edu
webnow.grcc.edu
alertus.ad.grcc.edu
subjectguides.grcc.edu
mydesktop.grcc.edu
5178081291534336-fe1.pantheonsite.io
grccwireless.grcc.edu
imagenow.grcc.edu
lib.grcc.edu
phire.grcc.edu
ibtst.grcc.edu
Analytics.grcc.edu
selfservice.grcc.edu
dworkstst.grcc.edu
mydesktop.grcc.edu
ccsurveys.grcc.edu
bb.grcc.edu
lib.grcc.edu
pi.grcc.edu
sarsweb.grcc.edu
lib.grcc.edu
oc.grcc.edu
air.grcc.edu
lib.grcc.edu
sccmdb.ad.grcc.edu
pstools.grcc.edu
inowprodfcc.grcc.edu
csdev.grcc.edu
ndam.grcc.edu
5178081291534336-fe1.pantheonsite.io
imagenow.grcc.edu
relay.grcc.edu
grcc.edu
grcc.edu
bbtstf5.grcc.edu
pstools.grcc.edu
analytics.grcc.edu
grcc.edu
5178081291534336-fe1.pantheonsite.io
bb.grcc.edu
subjectguides.grcc.edu
*.grcc.edu
hammerhead.grcc.edu
bbdev.grcc.edu
ipam.grcc.edu
psdeves1-2017.ad.grcc.edu
bbdev.grcc.edu
ipam.grcc.edu
dworks.grcc.edu
ds.grcc.edu
*.grcc.edu
mail.grcc.edu
guac.grcc.edu
sccm.ad.grcc.edu
gwsync.grcc.edu
bb.grcc.edu
mydesktop.grcc.edu
guac.grcc.edu
ibtst.grcc.edu
dooraccess.grcc.edu
prtg.grcc.edu
grccwireless.grcc.edu
guac.grcc.edu
mydesktop.grcc.edu
sccm.ad.grcc.edu
lib.grcc.edu
*.grcc.edu
ACS.grcc.edu
alertus.ad.grcc.edu
edocstst.grcc.edu
idatahub.grcc.edu
prtg.grcc.edu
subjectguides.grcc.edu
imagenowtst.grcc.edu
Unity1.grcc.edu
lib.grcc.edu
psupges1.ad.grcc.edu
*.grcc.edu
oc.grcc.edu
pstst.grcc.edu
Unity1.grcc.edu

Certificate

The complete raw certificate details for *.grcc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cG0hWHwGChF6BhKCYSu
Kq9TY1nob834af4DhtALWDh8Wk46DZ0Yv/thTiSJc85eycKlVDwfpk7vooQsrOGI
xSgmz5y4EXzob6uZtQnnPxl4PDC0/wEemCvZutSAcoDRuhrFWBqW61ORQ+cEqr7r
ooP13miamgDD1ueNuj+vN2/Ad2x02TQyVVD06y01/kyvoNU9a1hxieCNziFhGwoD
PQb0CMNqXacXJfpdnkRssOmoPWGHOjapOzf3mzuZX0OLiP6KwdNYhIxih8CT6Rcr
67+H0sERsUxeTZ4DgPR0zr3oScGy+Hla/w6NjYcf58nfxP4dAUh2OamcuvsYTGJP
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293984235500594796517498593139638192374
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-18 13:12:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 13:42:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Rapids'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Rapids Community College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.grcc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26479325312492029200082616280751230664704176277360494087546413836480187645906328136138659746751136617938112503663270795902641453152520735825403537232126501132449015758395486719047999743724234461976283092644484995773597871170131171801881011391100859786446956636237773741014409022327479065855344517612738207265631290279090369274398034460111074254317995114442964030951604742144290344839246959495980675559831455180364630184287811056849051406446921278825793741037651290908918266439326780227322957593340591982885818800312878500389470991706234304697738531861955673479938862463471613554152384897981202155224013971389967126417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grcc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (478 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58a17856deeb62e416f490d157073b1b049e69ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00179b6a2cc84a924814e79c98718af7ceb98404ff02ad1bb1db834a4b6c9ba31557bdbe348d1fba6adc5699f36e98d1390b75320a77445a16a54989bc1651a5a8c6fe0baf8c287e3057fd12a2f12a60aab4339b84f4588d8b1c06d593e22cc37281790966d4f2821c9f65f48957e3c529766cdc3613cf5a3b3698f7c68e5b0f8a363376ec47cef15fc17aee542c73164c82c83f1336a1cdf5865f58000fc20a0ac026be8241c426e4675effd1a7a17f57755913597fa3b09fa68105be6104d84cfbda88ba0da1c6fd5a32828e7bd0dfb275ee6dfe7c788a65bf6b0f785e3b48309362a7843cbb61f8028926bcfbc2007efdca9eabf1a8adf819c0ab839d12ae96