cei-setup-api.campuslabs.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:18:12:b1:ce:eb:cc:d8:d5:d5:ed:d2:2d:61:e8:f8 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cei-setup-api.campuslabs.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:18:12:b1:ce:eb:cc:d8:d5:d5:ed:d2:2d:61:e8:f8
Serial Number (int): 10758818261680770554644804031272315128
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a3:59:5d:9e:22:16:1b:b9:a5:62:17:c9:0b:5d:4f:0e:cf:6f:a5:11
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): af:d3:c5:bd:f7:7f:5c:54:cb:79:db:cc:92:ac:16:1f:93:eb:e4:be
Fingerprint (sha256): 3a:99:97:cb:65:fc:6c:8d:2d:1a:cb:11:78:06:92:a9:e8:b8:36:f7:1c:e3:ea:7b:a1:1d:fc:ad:ff:39:52:1c

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate cei-setup-api.campuslabs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cei-setup-api.campuslabs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cei-setup-api.campuslabs.com

Other certificates including the domain name campuslabs.com

(limited to 100 certificates)
sa6gl.wpc.edgecastcdn.net
courseevaluationsupport.campuslabs.com
engage3.campuslabs.com
beaconsupport.campuslabs.com
ssl279011.cloudflaressl.com
Collegiatelink4.Campuslabs.com
insightsupport.campuslabs.com
ssl2155.cloudflare.com
evaluations.campuslabs.com
collegiatelink6.campuslabs.com
beaconsupport.campuslabs.com
ssl279011.cloudflaressl.com
connect.campuslabs.com
collegiatelink.campuslabs.com
ideas.campuslabs.com
ssl379908.cloudflaressl.com
baselinesupport.campuslabs.com
learninglab.campuslabs.com
baseline.campuslabs.com
core-data-api.campuslabs.com
ssl2155.cloudflare.com
engagesupport.campuslabs.com
demographics.api.campuslabs.com
outcomessupport.campuslabs.com
complianceassistsupport.campuslabs.com
courseevaluationsupport.campuslabs.com
complianceassistsupport.campuslabs.com
bourne-status.wifinity.net
courseevaluationsupport.campuslabs.com
baselinesupport.campuslabs.com
cereportapi.campuslabs.com
identityserver.campuslabs.com
ssl379908.cloudflaressl.com
sa6gl.wpc.edgecastcdn.net
courseevaluationsupport.campuslabs.com
insight.campuslabs.com
connect.campuslabs.com
baselinesupport.campuslabs.com
cereportapi.campuslabs.com
outcomessupport.campuslabs.com
ssl379908.cloudflaressl.com
demographics-internal-api.campuslabs.com
insightsupport.campuslabs.com
ssl2155.cloudflare.com
engagesupport.campuslabs.com
beaconsupport.campuslabs.com
beaconsupport.campuslabs.com
ceapi.campuslabs.com
sa6gl.wpc.edgecastcdn.net
Collegiatelink3.CampusLabs.com
ssl279010.cloudflaressl.com
ssl379908.cloudflaressl.com
courseevaluationsupport.campuslabs.com
www3.campuslabs.com
outcomessupport.campuslabs.com
collegiatelink3.campuslabs.com
baseline.campuslabs.com
outcomessupport.campuslabs.com
ssl379906.cloudflaressl.com
ideas.campuslabs.com
cei-reporting-api.campuslabs.com
beaconsupport.campuslabs.com
complianceassistsupport.campuslabs.com
access.campuslabs.com
collegiatelink5.campuslabs.com
outcomessupport.campuslabs.com
ssl379908.cloudflaressl.com
ssl379907.cloudflaressl.com
ssl279011.cloudflaressl.com
ssl279011.cloudflaressl.com
Collegiatelink3.CampusLabs.com
*.home.campuslabs.com
courseevaluationsupport.campuslabs.com
notations.api.campuslabs.com
www3.campuslabs.com
ssl279011.cloudflaressl.com
vpn.campuslabs.com
ssl279011.cloudflaressl.com
ssl279009.cloudflaressl.com
engagesupport.campuslabs.com
complianceassistsupport.campuslabs.com
ssl379908.cloudflaressl.com
www3.campuslabs.com
Collegiatelink3.CampusLabs.com
ssl279011.cloudflaressl.com
collegiatelink2.campuslabs.com
ssl279009.cloudflaressl.com
engagesupport.campuslabs.com
ssl279011.cloudflaressl.com
sa6gl.wpc.edgecastcdn.net
complianceassistsupport.campuslabs.com
ssl279011.cloudflaressl.com
ssl2155.cloudflare.com
cei-setup-api.campuslabs.com
evaluations.api.campuslabs.com
Collegiatelink4.Campuslabs.com
ssl279011.cloudflaressl.com
ssl279011.cloudflaressl.com
beaconsupport.campuslabs.com
corp-exch-01.corp.campuslabs.com

Certificate

The complete raw certificate details for cei-setup-api.campuslabs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzpD7fzLcGUtYOSXeQyN
ObT18KsJXFChOAptlABzOSre5SvpDDFZjFS927yx3/hvfLDPyRMN0lqhiP3TjPYn
s5jHXmXkHoFPBUFmQXvIaTafSstgdlwVLFCdDUxdSFChGHL9OsfxqDPLK8oXIb3F
GDiihddt6afviPmE2tYy9OZ1+4CpCCl+Avtoa0e3mmIzQ+rvFWZN1HToOvQvgnZw
xyCb+Oi1MAWKbDwgyGFv+3K8WMObbbtvTozJYVTdtvYnNgrKw0/0ki9Sz1xhzy9H
txO9ieM87Nlm1GLqbF523ushURSV+QEBW3GUNlKS/9uehQKDmNrwI1IUtmF7t4W5
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10758818261680770554644804031272315128
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cei-setup-api.campuslabs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22120435084065274344743828394748503383195122354769799892874421507311288340796745819196187599842399735391543202622058363818548485592111701885059470951126804069886190125197501304598229759219500257158174679608938641292667220622419775996833323041370629928962534613866983059486344961474322778883087463582224110776360395951219370318269084565322403174410048922728816626200688924866004455702593529574222126091649323745413825980191368983351720467288431954281678255629942971958642509893310676610121593764637461570524514447315809960536912550509193380405618141348394923811682525660554560873179593265172202913527416106000790698473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3595d9e22161bb9a56217c90b5d4f0ecf6fa511
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cei-setup-api.campuslabs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187b15ab1e20000040300473045022100ff88edacf96159016ad4ab6efaf8f045160d8f9f1fd372cd1e81488b6f64a694022073c0a3b2c9c3f9f46668cd232614cc194ac1f19fa2d5dd2ee8b1096f3636d5a9007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000187b15ab202000004030046304402203d479792fa8d16532d6d94d1b3d8133a747f5e66ce644dfd3f70aedc7bcb84d902202f9b004031eee15c8fab8797316e90b79a716f244672b408d7d3dc3f10a28de30076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187b15ab19800000403004730450220377709139c22b7271feb162eccf14c1751c0a511e023958842eefef43b79e024022100fc9c946513f7b6aa27a81fb94820b7826a62cdb99f87183a8f735290d234376f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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