store.intervarsity.org

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 02:38:84:f0:0c:1b:dd:96:74:33:43:ad:12:41:70:3a was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=store.intervarsity.org

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:38:84:f0:0c:1b:dd:96:74:33:43:ad:12:41:70:3a
Serial Number (int): 2951920912221975070305477005980823610
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ca:a0:ae:4b:41:30:eb:21:78:24:4a:5d:5f:45:1f:cf:96:ee:32:f4
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): b2:80:8e:1b:0e:53:cb:dd:c8:79:c8:f6:d1:01:b6:ca:09:86:c3:2b
Fingerprint (sha256): 4a:44:68:30:0e:c5:1a:fa:45:c2:da:b3:9a:a6:2b:f4:f5:a7:22:a6:f3:70:75:fe:6a:a1:38:6c:0f:0f:f1:f0

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate store.intervarsity.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for store.intervarsity.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

store.intervarsity.org

Other certificates including the domain name intervarsity.org

(limited to 100 certificates)
store.intervarsity.org
intervarsity.org
intervarsity.org
www.newengland.intervarsity.org
central.intervarsity.org
www.newengland.intervarsity.org
*.intervarsity.org
glw.intervarsity.org
virginia.intervarsity.org
aleksivirkkala.com
*.intervarsity.org
*.intervarsity.org
WWW.INTERVARSITY.ORG
*.intervarsity.org
2100.intervarsity.org
redriver.intervarsity.org
redriver.intervarsity.org
newengland.intervarsity.org
redriver.intervarsity.org
www.virginia.intervarsity.org
frbimoveisbr.com.br
virginia.intervarsity.org
www.newengland.intervarsity.org
akamai-san15.exacttarget.com
www.newengland.intervarsity.org
midatlantic.intervarsity.org
midatlantic.intervarsity.org
midatlantic.intervarsity.org
central.intervarsity.org
www.virginia.intervarsity.org
central.intervarsity.org
giftplanning.intervarsity.org
glw.intervarsity.org
newengland.intervarsity.org
glw.intervarsity.org
redriver.intervarsity.org
www.virginia.intervarsity.org
ivingla.com
redriver.intervarsity.org
www.newengland.intervarsity.org
*.intervarsity.org
www.newengland.intervarsity.org
newengland.intervarsity.org
www.newengland.intervarsity.org
intervarsity.org
smapp.cru.org
www.studioxba.com.br
nso.intervarsity.org
store.intervarsity.org
www.northwest.intervarsity.org
midatlantic.intervarsity.org
giftplanning.intervarsity.org
www.newengland.intervarsity.org
*.intervarsity.org
www.newengland.intervarsity.org
northwest.intervarsity.org
www.virginia.intervarsity.org
northwest.intervarsity.org
www.newengland.intervarsity.org
www.redriver.intervarsity.org
redriver.intervarsity.org
newengland.intervarsity.org
staffportal.intervarsity.org
newengland.intervarsity.org
www.midatlantic.intervarsity.org
pages.connect.intervarsity.org
midatlantic.intervarsity.org
view.connect.intervarsity.org
redriver.intervarsity.org
midatlantic.intervarsity.org
smapp.cru.org
*.intervarsity.org
www.midatlantic.intervarsity.org
virginia.intervarsity.org
*.intervarsity.org
www.redriver.intervarsity.org
virginia.intervarsity.org
intervarsity.org
www.newengland.intervarsity.org
*.intervarsity.org
www.midatlantic.intervarsity.org
redriver.intervarsity.org
central.intervarsity.org
virginia.intervarsity.org
click.connect.intervarsity.org
midatlantic.intervarsity.org
store.intervarsity.org
redriver.intervarsity.org
sentryspotlight.com
*.intervarsity.org
www.northwest.intervarsity.org
www.newengland.intervarsity.org
www.redriver.intervarsity.org
www.newengland.intervarsity.org
www.newengland.intervarsity.org
virginia.intervarsity.org
www.midatlantic.intervarsity.org
www.newengland.intervarsity.org
central.intervarsity.org
www.virginia.intervarsity.org

Certificate

The complete raw certificate details for store.intervarsity.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgIQAjiE8Awb3ZZ0M0OtEkFwOjANBgkqhkiG9w0BAQsFADBu
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg
RFYgVExTIENBIC0gRzIwHhcNMTkwMTE3MDAwMDAwWhcNMjAwMTE3MTIwMDAwWjAh
MR8wHQYDVQQDExZzdG9yZS5pbnRlcnZhcnNpdHkub3JnMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAp0PvvocHkQwUZIU/VfJfJB1BL+aTKr4Ik5HcjS3q
ibnW1xXhgYbH07z7qrnt0yhAKnVMz+9/oyGCoW8nsVMr2EiUqY06R/Psm9/akyDl
uz6T/WEvfQwIpn60XdTDpPPg4nqWYBqvQxXeEEynNZZTlSvog44SMT8isE0l33TZ
p7jXETrkC20eUgUtLxaeQgeZgQ09318kZOnQhkFTTy7w9FgcpbzZsV0FD/URQzre
AQ0YZ7nXapvdddJHAhpEfeFokP3n8w+r9NFNEnv5imTuswpWtlGueRpGxLVtiKZo
2tP6rpXAKMvvyFGJlQxhPtkwAgQGcFkTcrYXNZi4uk7MQwIDAQABo4IBhzCCAYMw
HwYDVR0jBBgwFoAUeN+RkF/u3qz2xXXr1UxVU+8kSrYwHQYDVR0OBBYEFMqgrktB
MOsheCRKXV9FH8+W7jL0MCEGA1UdEQQaMBiCFnN0b3JlLmludGVydmFyc2l0eS5v
cmcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjBMBgNVHSAERTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczov
L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECATCBgAYIKwYBBQUHAQEEdDBy
MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSgYIKwYBBQUH
MAKGPmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9FbmNyeXB0aW9uRXZlcnl3
aGVyZURWVExTQ0EtRzIuY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC
BQAwDQYJKoZIhvcNAQELBQADggEBANWykTV79Y+MRwRbqbS+fLSF+HHfYw4K2Kbf
bJfL23Ukiqxp7IGqOw0zhT3lBXd3Rzi84InCzsn1EBoAXMuYMcyMbIEHC60k7fIN
ZrsyqBGaO0SSx946mm2YZE5/uXqYVJXGLOlpoTecRZ+RGhd87WLeJDHPmioE/4W1
cN0qO1WjkPADRy+zpsQmC7kBcPK32ffnBla78JGTQy7COdVc4HVDmMkE05ISYVHI
ROhH5lk9wV3YmWLgaTDPCYvBJgAaU7JWv8uRyVDRmOf9Dqp/jRii3FcYRYbSa9lA
EVdbXkpKKJmhtyZvT6hTInG2tMAIm2EYtAQ3+R6KfNj7ajby7W0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0PvvocHkQwUZIU/VfJf
JB1BL+aTKr4Ik5HcjS3qibnW1xXhgYbH07z7qrnt0yhAKnVMz+9/oyGCoW8nsVMr
2EiUqY06R/Psm9/akyDluz6T/WEvfQwIpn60XdTDpPPg4nqWYBqvQxXeEEynNZZT
lSvog44SMT8isE0l33TZp7jXETrkC20eUgUtLxaeQgeZgQ09318kZOnQhkFTTy7w
9FgcpbzZsV0FD/URQzreAQ0YZ7nXapvdddJHAhpEfeFokP3n8w+r9NFNEnv5imTu
swpWtlGueRpGxLVtiKZo2tP6rpXAKMvvyFGJlQxhPtkwAgQGcFkTcrYXNZi4uk7M
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2951920912221975070305477005980823610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'store.intervarsity.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21115297666548838892309681288912747491818856350093952113052180428111077312328348978981350628088035259471261308047597514114592726542398228853626345605889809521019329702366300131515415493352429778642206510162101955008781892972010727465629885902232268669313350575632041452088415953938036269402832659181778273859316687182086145044142839918636112413457268153823840875918997517683064879971450183795752931595525142112397622079742739288952499518253711775674505394198748917952485507727349758024878906981679846549599155567762056706019316823924640374143437045562716499415140946488546164527898940535139297900251349685703560580163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							caa0ae4b4130eb2178244a5d5f451fcf96ee32f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.intervarsity.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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