bot.regiscollege.edu

- Regis College -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:28:18 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Regis College

Company registration number: SoYlaPiYAJLy9al2PD9VzRdpL-th7ZU8
Organization: Regis College
Organization unit: ITS
State / Province: Massachusetts
Locality: Weston
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:28:18
Serial Number (int): 141336
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: db:9b:41:1c:04:ae:d0:e1:e5:ff:6e:d2:f3:7a:b6:1f:cb:c6:74:bc
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): e4:f3:87:1b:eb:cc:69:a9:c6:8f:b4:d4:21:20:fd:c5:61:da:08:ae
Fingerprint (sha256): 3a:19:44:b8:4c:0f:74:60:f1:30:89:7b:79:e4:f8:94:76:e1:77:67:1f:52:db:20:43:ee:f4:d1:e4:20:d0:bd

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate bot.regiscollege.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bot.regiscollege.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bot.regiscollege.edu

Other certificates including the domain name regiscollege.edu

(limited to 100 certificates)
printing.regiscollege.edu
helpdesk.azdelta.be
mail.regiscollege.edu
grad.regiscollege.edu
learn.regiscollege.edu
filedrop.regiscollege.edu
helpdesk.azdelta.be
shibboleth-idp.regiscollege.edu
fsus-3.freshservice.com
regisaccess.regiscollege.edu
alumni.regiscollege.edu
bot.regiscollege.edu
dxr.regiscollege.edu
filedrop.regiscollege.edu
s2.ad.regiscollege.edu
helpdesk.azdelta.be
grad.regiscollege.edu
mail.regiscollege.edu
voicemail.regiscollege.edu
moodle.regiscollege.edu
passwd.regiscollege.edu
learn.regiscollege.edu
helpdesk.azdelta.be
regisaccess.regiscollege.edu
dxr.regiscollege.edu
filedrop.regiscollege.edu
www.regiscollege.edu
easyspooler.regiscollege.edu
www.regiscollege.edu
degreeprograms.regiscollege.edu
degreeprograms.regiscollege.edu
grad.regiscollege.edu
online.regiscollege.edu
myonline.regiscollege.edu
libguides.regiscollege.edu
vpn.regiscollege.edu
bot.regiscollege.edu
printing.regiscollege.edu
changemypassword.regiscollege.edu
regisnet.regiscollege.edu
moodle.regiscollege.edu
changemypassword.regiscollege.edu
shibboleth-idp.regiscollege.edu
mail.regiscollege.edu
adastra.regiscollege.edu
www.regiscollege.edu
adastra.regiscollege.edu
ezproxy.regiscollege.edu
libguides.regiscollege.edu
regisaccess.regiscollege.edu
degreeprograms.regiscollege.edu
mail.regiscollege.edu
reports.regiscollege.edu
mahara.regiscollege.edu
myonline.regiscollege.edu
libguides.regiscollege.edu
regishub.regiscollege.edu
iron.ad.regiscollege.edu
shibboleth-idp.regiscollege.edu
*.regiscollege.edu
grad.regiscollege.edu
libguides.regiscollege.edu
helpdesk.azdelta.be
apm2.ad.regiscollege.edu
alumni.regiscollege.edu
shibboleth-idp.regiscollege.edu
grad.regiscollege.edu
degreeprograms.regiscollege.edu
degreeprograms.regiscollege.edu
*.regiscollege.edu
helpdesk.azdelta.be
apm2.ad.regiscollege.edu
moodle.regiscollege.edu
libguides.regiscollege.edu
adastra.regiscollege.edu
libguides.regiscollege.edu
apm1.ad.regiscollege.edu
*.ezproxy.regiscollege.edu
vpn.regiscollege.edu
helpdesk.azdelta.be
grad.regiscollege.edu
graduate.regiscollege.edu
imap.regiscollege.edu
fsus-3.freshservice.com
fortimail1.regiscollege.edu
MYONLINE.REGISCOLLEGE.EDU
apm1.ad.regiscollege.edu
tms-rti.regiscollege.edu
libguides.regiscollege.edu
degreeprograms.regiscollege.edu
mail.regiscollege.edu
regisnet.regiscollege.edu
fsus-3.freshservice.com
grad.regiscollege.edu
regisaccess.regiscollege.edu
degreeprograms.regiscollege.edu
helpdesk.azdelta.be
alumni.regiscollege.edu
vpn.regiscollege.edu
alumni.regiscollege.edu

Certificate

The complete raw certificate details for bot.regiscollege.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDJBNIhXHQPPWKql4ueh
Y8/sVyhZ5CVnGYhHw9yBk1H1i3om2rG4K+YRFV9M79NdQ/uXaTHdF4Y/hLCkVPRh
0joHipNdbxGRTdCQZbxoIx3GtWfrOGpkPZExPyk4uPduG6dLawBjniztiikkhrvd
//UKCqEvdnEGS3viVKFifurI1Tb8+IqH2XOtnA1mAnhDzwXnpO+Ak2V2UikG/MnJ
Jm4SLgxaie9hA/9pYIc4YPNWljq7eqzczyVC72ChO1eiH8jJXeW+sfjbWa3nbY8t
uBHr1t0vJN0/mE2gx4c6m/11c13c5bVpkMtLgcAnAimv/0j7jjrqGAPJMrmkGRTe
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-09 06:46:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-12 15:22:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SoYlaPiYAJLy9al2PD9VzRdpL-th7ZU8'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Weston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Regis College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bot.regiscollege.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22747676413943174289359868191593988056252403721322613560028205399287735949536930401402638355012980182894960333602645889261700965914304451076479245322813025551625532290831625857338294440028660446632502524426514843832390575256675068584332865473273574186273160785303641629564763261090435138836718407376305269897577176059981663755693310731082648884513205570996551015928911497673239084105945367975850643474794882814043817268571060916791245264339805886036379100038391846904149226154275139993172191509709712451129871080823247359625409462184510637663510766153888314449553486488065542584307162847645048415753028119874027970179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.regiscollege.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db9b411c04aed0e1e5ff6ed2f37ab61fcbc674bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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