mail.uncw.edu

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:30:30:5b:53:51:da:c8:02:4d:bb:ee:22:11:88:ee was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mail.uncw.edu

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:30:30:5b:53:51:da:c8:02:4d:bb:ee:22:11:88:ee
Serial Number (int): 9554807010914058886699685110931884270
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b5:ee:5b:0f:5d:82:55:10:36:25:bc:7f:d7:5b:3d:12:9d:27:5b:8a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 13:03:81:bc:92:e4:6a:2c:0c:1a:34:35:2b:fa:d7:46:1a:ce:8b:d8
Fingerprint (sha256): 3a:69:ed:0c:5e:eb:d5:6d:2a:03:e9:f9:b4:fd:6a:20:35:42:21:3a:d2:b1:e6:e2:77:00:16:c7:70:f7:87:e6

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate mail.uncw.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.uncw.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.uncw.edu

Other certificates including the domain name uncw.edu

(limited to 100 certificates)
san-6-s10.tlsprovisioning.exacttarget.com
sfunder7cert.net
web.offcampuspartners.com
sfunder25cert.net

blog.csb.uncw.edu
edge-uc1.peopleadmin.com
randall3.uncw.edu
blog.csb.uncw.edu
web.offcampuspartners.com
www.offcampuspartners.com
edge_uc4.peopleadmin.com
sfunder7cert.net
san-6-s10.tlsprovisioning.exacttarget.com
jobs.uncw.edu
sfunder7cert.net
n003.offcampuspartners.com
edge_uc4.peopleadmin.com
library.uncw.edu
web.offcampuspartners.com
emba.csb.uncw.edu
scalefundercert.net
onlinedegree.uncw.edu
aceweb.uncw.edu
edge_uc4.peopleadmin.com
csbapp.uncw.edu
onlinedegree.uncw.edu
edge_uc4.peopleadmin.com
csbapp.csb.uncw.edu
ldaps.uncw.edu
n003.offcampuspartners.com
emba.csb.uncw.edu
*.liblink.uncw.edu
onlinedegree.uncw.edu
*.liblink.uncw.edu
scalefundercert.net
spam.uncw.edu
edge-uc1.peopleadmin.com
ebill.uncw.edu
scalefundercert.net
illiad.uncw.edu
n003.offcampuspartners.com
uncw.iii.com
n003.offcampuspartners.com
scalefundercert.net
uncwimagenow.uncw.edu
offcampuspartners.com
san-6-s10.tlsprovisioning.exacttarget.com
edge-uc1.peopleadmin.com
appserv02.uncw.edu
sfunder7cert.net
ldaps.uncw.edu
sfunder7cert.net
sfunder7cert.net
remedy.uncw.edu
apply.uncw.edu
uncwcas.uncw.edu
sfunder27cert.net
randall3.uncw.edu
*.liblink.uncw.edu
gradapply.uncw.edu
library.uncw.edu
sfunder7cert.net
n003.offcampuspartners.com
n003.offcampuspartners.com
www.offcampuspartners.com
san-6-s10.tlsprovisioning.exacttarget.com

sfunder7cert.net
*.uncw.edu
san-6-s10.tlsprovisioning.exacttarget.com
*.liblink.uncw.edu
edge_uc1.peopleadmin.com
ba-bbdev1.uncw.edu
scalefundercert.net
scalefundercert.net
*.uncw.edu
scalefundercert.net
edge_uc1.peopleadmin.com
csbapp.uncw.edu
san-6-s10.tlsprovisioning.exacttarget.com
edge_uc1.peopleadmin.com
edge-uc1.peopleadmin.com
blog.csb.uncw.edu
ebill.uncw.edu
*.pdsportal.uncw.edu
san-6-s10.tlsprovisioning.exacttarget.com
alumni.uncw.edu
mail.uncw.edu
learn.csb.uncw.edu
giving.uncw.edu
mealplan.uncw.edu
blackboard.uncw.edu
webdev.cislabs.uncw.edu
digitalcollections.uncw.edu
*.pdsportaltest.uncw.edu
uncw.iii.com
educationabroad.uncw.edu
ba-aim1.uncw.edu
web.offcampuspartners.com

Certificate

The complete raw certificate details for mail.uncw.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YvjV70yBkcGfUm8p9Vr
ND/anTfbNKB60ULaS80BLkTooXS1i5aP6rlw79w+1V9pFW6+PJxBR9bWWa6E+S/8
CX3rbEt4K3zf5nG3aZZH1qpohtXu3QX+cCOYkBf3mM1/WRr4F0UoVft7z2DOFA0c
SgscWyXmFC8B+EDNgL7I1YyBAkENivbsMLmtABz5ttfxJ3WiiKnOhhobnoOZ8Zw1
ck8b9FAkBKN6gjV1oE2J002e8QSGVp7rbE3Vr4QjpYhJerA6Zinw6kTyzKUKq3Jy
7t8CEN/HB292HDZlnsu/h+yniRtMr4s8Juk/ntnbvVMP6uc/sLqszas/542oWtRZ
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9554807010914058886699685110931884270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.uncw.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26452787110050950169391243911682193165738006304107554478804463385817304098716025031123215987562747917969061141344811976367410960236120535549609692507783640634798658869999348757212456997706086983243422786384496943699605935636675485198271011661370432812419949261795673755017615306937040621126384884252943978831245671790593293614587377264236606733101355409802589558906327119225590798072214398579835349270052210433070769575712353002107823406327587585545681711978781034407311480814267748925193881801053673418282107463790140714682876683896623178985314623733734909347460773899557236793067168776754477060344303983512798910877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5ee5b0f5d8255103625bc7fd75b3d129d275b8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.uncw.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b0313276800000403004630440220771bfd02100654ed4772424af023fa53ed4173dea64c50fc0172a3a9fa0df90f022005f9060ececbbd16e4c0f908774eea90f99f365197b4ed1c25605d57a36b4f1800770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b0313279b000004030048304602210099d23a6164ebb66933bd4811bb6ce1af1528b2d1e7b99fc0796ae0931ccbf714022100a22b9840a4d00e982aec520a0256521b3a23bf32842c4f1bff8da2f4d6516678007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b031327970000040300473045022100f5852eb2c796714ad9fba549de451427d926a383c1adbcf803cba54559127e8b0220513d528f56c1b89faf58e2d88a86c87724105adea973e4069135f6cd4b9babcc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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