*.whitworth.edu

- Whitworth University -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 5f:a2:72:a4:f1:1c:3f:3d:aa:c4:9a:ca was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Whitworth University

Organization: Whitworth University
State / Province: Washington
Locality: Spokane
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 5f:a2:72:a4:f1:1c:3f:3d:aa:c4:9a:ca
Serial Number (int): 29597463308224257679656524490
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d2:1c:a9:40:20:a3:52:ce:db:0d:7d:6e:90:35:2b:71:76:3c:f3:69
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 16:98:80:54:4d:2b:54:a0:11:07:d6:bd:01:1c:34:fc:48:75:a0:bb
Fingerprint (sha256): 3b:35:7f:8f:58:fe:11:f1:8d:54:0f:c2:07:2c:c0:63:36:06:12:8c:44:4f:ca:03:3e:f3:36:d7:42:c3:31:80

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.whitworth.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.whitworth.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.whitworth.edu
whitworth.edu

Other certificates including the domain name whitworth.edu

(limited to 100 certificates)
cluster3.technolutions.net
cluster3.technolutions.net
blackboard.whitworth.edu
cluster3.technolutions.net
apiprod.whitworth.edu
digitalcommons.whitworth.edu
nextcatalog.whitworth.edu
cluster3.technolutions.net
*.whitworth.edu
cluster3.technolutions.net
editcatalog.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
connect.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
connect.whitworth.edu
cluster3.technolutions.net
nextcatalog.whitworth.edu
cluster3.technolutions.net
digitalcommons.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
connect.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
digitalcommons.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
apiprod.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
clearpass.whitworth.edu
cluster3.technolutions.net
radius.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
serve.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
learn.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
libguides.whitworth.edu
us-east-1-san2.blackboard.com
us-east-1-san2.blackboard.com
cluster3.technolutions.net
connect.whitworth.edu
digitalcommons.whitworth.edu
*.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
ccm1-ms.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
www.whitworth.edu
serve.whitworth.edu
*.whitworth.edu
apply.whitworth.edu
cluster3.technolutions.net
news.whitworth.edu
cluster3.technolutions.net
mail.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
libguides.whitworth.edu
apply.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net

Certificate

The complete raw certificate details for *.whitworth.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNkXimvzm6KDGQx6sXmC
ALbS5Nr9ZkfTg15lAaF9CHwBVOqqjLv+MoUsCEsWdkwkbp+2GoiDFwFIcL3uq8Em
1pgCT417Q9v213+ekSuwoz/z0gbVAqyt1ZE17cEuzF4TGojf+0j+FTbPDtlBkx2B
tKYMsRShPhxu23ILcjBJD263OGzB0QDx/qpDBFCo4m80WrpUeVbhqvJFp1Z9g5au
IHikLeNGFGAHMePWDy7XvFXOH9mFwyO+z4CXRzfNNdMeK0PjOK3bKN5UoUV4ATzU
FFOGFks68NQDbjM30DOZh/cMaIc1+yQivcRKDrNVTBJpxnyQsrNfsAwYkSQYr8jW
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29597463308224257679656524490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 21:20:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-11 14:27:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Spokane'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Whitworth University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.whitworth.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24344806586820139815800695691801985584149292940836007929988235753081181950354368745752522370549312754509785505699400547446991566515013795875682636173156644282633000946125423714615528559897745517529714931675499395879904955635092034218166632827338674129351375348250520366673810185034533096910773900769784996907219438066702266077362564691462750904506728932842384046200727098855763685674124332633919690175047912111570088688871877462102541982088737847242886278965400158970954787284737555027308096967388602781743518558627027929185849808364109152983313789885714669100811147795586873116132741303434628356899366673273391207969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitworth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitworth.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d21ca94020a352cedb0d7d6e90352b71763cf369
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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