mycpl.minnstate.edu

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 06:88:cd:2c:e4:d5:81:0a:8a:0c:f2:80:95:c7:f4:f6 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mycpl.minnstate.edu

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:88:cd:2c:e4:d5:81:0a:8a:0c:f2:80:95:c7:f4:f6
Serial Number (int): 8685681798298823833506668080731256054
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7c:fc:ed:fe:af:00:fd:9f:15:14:70:a9:68:4e:ff:f7:40:07:38:e4
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 19:2b:82:5b:2c:d7:86:1e:18:f3:70:28:5a:c7:c5:46:0c:7f:11:23
Fingerprint (sha256): 5b:45:cd:cb:4a:bc:fc:8e:5c:18:d9:13:38:b9:98:6a:fb:ba:08:cf:d6:60:a7:3e:b8:73:44:69:ea:ab:17:9a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate mycpl.minnstate.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycpl.minnstate.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mycpl.minnstate.edu

Other certificates including the domain name minnstate.edu

(limited to 100 certificates)
controlsystems.newcenturyresources.com
iseek.org
www.viveportstatus.com
status.moishehouse.org
eservices.minnstate.edu
status.fbdfrozen.com
programnavigator.minnstate.edu
accountability.minnstate.edu
opendora.minnstate.edu
status.skynetexpress.com
*.learn.minnstate.edu
servicedesk.minnstate.edu
webmeeting.minnstate.edu
opendora.minnstate.edu
www.viveportstatus.com
www.viveportstatus.com
*.learn.minnstate.edu
www.viveportstatus.com
www.viveportstatus.com
reportsBI.minnstate.edu
monitor.mss.brainwalk.net.br
careerwise.minnstate.edu
status.skynetexpress.com
status.minnstate.edu
webmeeting.minnstate.edu
securefileshare.minnstate.edu
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
24x7.holzundgarten.de
www.ire.minnstate.edu
webmeeting.minnstate.edu
careerwise.minnstate.edu
*.lib.minnstate.edu
status.minnstate.edu
mediaspace.minnstate.edu
www.viveportstatus.com
www.ire.minnstate.edu
www.viveportstatus.com
eservices.minnstate.edu
www.viveportstatus.com
ire.minnstate.edu
opendora.minnstate.edu
www.viveportstatus.com
signon.minnstate.edu
www.viveportstatus.com
accountability.minnstate.edu
starid.minnstate.edu
signon.minnstate.edu
www.viveportstatus.com
xostatus.crownpeak.com
mediaspace.minnstate.edu
opendora.minnstate.edu
*.learn.minnstate.edu
eservices.minnstate.edu
minnstate.edu
www.viveportstatus.com
ire.minnstate.edu
status.fire.com
minnstate.edu
careerwise.minnstate.edu
www.viveportstatus.com
securefileshare.minnstate.edu
24x7.holzundgarten.de
www.viveportstatus.com
securefileshare.minnstate.edu
xostatus.crownpeak.com
*.bookitcalendar.minnstate.edu
ire.minnstate.edu
status.entrecloud.com
signon.minnstate.edu
careerwise.minnstate.edu
status.globalvisioninc.com
signon.minnstate.edu
status.skynetexpress.com
status.eu.premium.salusconnect.io
opendora.minnstate.edu
www.ire.minnstate.edu
*.learn.minnstate.edu
status.us.deptagency.com
*.bookitcalendar.minnstate.edu
mycpl.minnstate.edu
askus.minnstate.edu
www.viveportstatus.com
eservices.minnstate.edu
status.caznet.com.au
www.programnavigator.minnstate.edu
*.lib.minnstate.edu
www.ire.minnstate.edu
status.sentrygroup.com.au
ire.minnstate.edu
www.viveportstatus.com
monitoring.i-beheer.nl
ire.minnstate.edu
mediaspace.minnstate.edu
mediaspace.minnstate.edu
www.viveportstatus.com
*.learn.minnstate.edu
*.lib.minnstate.edu
*.lib.minnstate.edu

Certificate

The complete raw certificate details for mycpl.minnstate.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLDfyq1nazGh/40DANIq
eo0mHV4VE8xqHj7hNx7o0o5eGTOIgABo+npPDbhPz3Me9sikMVXeLQmMPhr4pNGa
wU1IknJPXzIc34Iz6v70+UAPvIsTec22ECYNadQLFBt4AfF/UBLnlz/ANvEg0sAw
cUgJUvYW2F2w4yEoHypGWYizK+JcDEZl0oEccctuWIT6XmPYK9l0vKEexJEljVdJ
YtLe7J2h+g0bhdnwin5faeyF58xsV6MpEX7UVBcAityrAZT8fyXOBeVVjC7Qzqw5
7TQs8fbP4dVUQ+BfeZfT7eSUL22ci3VXZFHg5zQysk/ZwdeDbkxrw+0SHl3Zbn/v
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8685681798298823833506668080731256054
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycpl.minnstate.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19780395486730428853818333109001977340270202821044628483851811972377619074922574702210587695029180890709666868335804222893252372712795649870186572669925756346793576306810790499007145048144402016827698012754420302153385977057687308812987198307696651582586593685404389183501864823717537073039161533775800866430472424607559993790143518774127195060796440496481637047222866648830314186955878277330706982895883306400791162620058586635254536999536492902283674533110360614357375871828013989296352699139879852524966255290401263590004479037997117696067468940660042926984099131901777194294158613548580861799031917583200656814033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7cfcedfeaf00fd9f151470a9684efff7400738e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycpl.minnstate.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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