farm.apereo.org

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 58:ed:a5:59:a4:01:57:3d:0a:00:00:00:00:08:d2:c4 was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=farm.apereo.org

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 58:ed:a5:59:a4:01:57:3d:0a:00:00:00:00:08:d2:c4
Serial Number (int): 118205991684193579767018926052404155076
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 5c:4e:66:5e:62:25:6f:bb:03:dc:6e:0f:e1:05:49:38:32:c1:75:d1
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): bd:8f:10:7e:e2:a8:4c:68:1d:da:ef:8b:20:3b:7d:34:ce:2c:c9:65
Fingerprint (sha256): 4f:9c:3d:ee:26:c7:cc:55:18:0e:92:3b:98:1f:46:9f:5c:dc:96:8e:77:6b:cc:98:7b:a2:1f:a8:b0:51:b8:50

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate farm.apereo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for farm.apereo.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

farm.apereo.org

Other certificates including the domain name apereo.org

(limited to 100 certificates)
farm.apereo.org
www.apereo.org
virtconf.apereo.org
farm.apereo.org
farm.apereo.org
apereo.org
farm.apereo.org
www.apereo.org
www.apereo.org
virtconf.apereo.org
apereo.org
www.apereo.org
www.elemiestudio.com
www.apereo.org
apereo.org
zaubertopf.link
www.apereo.org
apereo.org
deep.picks.com.br
www.apereo.org
www.apereo.org
farm.apereo.org
virtconf.apereo.org
farm.apereo.org
virtconf.apereo.org
www.apereo.org
xgenica.com
conf.apereo.org
virtconf.apereo.org
conference.apereo.org
tracker.ghelectionpromises.com
virtconf.apereo.org
alexfurnell.com
virtconf.apereo.org
farm.apereo.org
farm.apereo.org
www.apereo.org
conf2013.apereo.org
herkulano.com
competition.lyx-arkitekter.se
apereo.org
www.apereo.org
tweet.sei-un.com
oae.apereo.org
coalyte.com
www.apereo.org
virtconf.apereo.org
www.apereo.org
farm.apereo.org
virtconf.apereo.org
farm.apereo.org
reports.eyerov.com
www.burburata.com
oae.apereo.org
www.apereo.org
apereo.org
virtconf.apereo.org
www.apereo.org
www.nugabest-gv.mk
coalyte.com
www.apereo.org
thepub.tresastronautas.com
farm.apereo.org
www.apereo.org
solbotix.com
apereo.org
virtconf.apereo.org
computersystemsint.com
conference.apereo.org
terasite.com.br
www.apereo.org
licensing.apereo.org
sofiadonovan.net
www.apereo.org
conference.apereo.org
apereo.org

Certificate

The complete raw certificate details for farm.apereo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsKjEKx5xiytKKKF0/3o
cGTDG1hjvam4KmvzGoS52IevKKUeUHd1GA/NfHzmgXQqAPu3rgcmGJE8Xx9Akguh
wlIhylelgXSXQHkJQ+WJVPY3T1CxIP3H8fdqvWyymMZcMX59x8qMLpz5oLsIBEUK
hu1GEBLWLnMZqylJ7nT8+WG1Mn8mm8BCycPGutEDTzM7ybmZUVfqkFB5ZiMbioDv
JyChs9JkttMJlZi14UBlHHExtKsBdUOrW1rptrelq7cuLonZXW0up9YngFJY32eo
NC/e3o9nhswg13yniZc4qixXL/sKeFMMg5XpEduWMo6rVqLJZR1xXajW2m6skSoQ
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118205991684193579767018926052404155076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 23:41:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 23:41:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farm.apereo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22061444132753685900491430933969744471851070859016186780325163800405915723458255204330011813309919590883785540622508561717139898982979157978332607368346908579886656883611305761412560384209942013074299718664315690046932139378134455978813586015988859758330456185687489299064176466123835951392915916561384795034064972023802805045508112424473080402186399495089668418948159126541947233283762021326289202099150474297367651278565766703812897715512177486655307041919473646134488909150674936521665024518615505277376213055539314229139879555678027330906135924345258958209021475095034152020701188217690464890331176071281460777189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c4e665e62256fbb03dc6e0fe105493832c175d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm.apereo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f54406637000004030046304402200263a10f9c57fe26f4bc4ca7edd0d55daece401c4e2ac2dd2d6069f1feebdb07022061b5ded00a50220300644f7cfd0fd7efdc5ec9e6c68c940db6fc20eda77e3e070077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f544066600000040300483046022100bf620cb7b25695372586c269927af786c6a7bfadd9fef9ce690da3f7935c9db1022100daccbe704fa5ec95338236dcc2ccdcb528a04cd576f1c3d5b89e7e1950aabb8c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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