www.ashesi.edu.gh

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 10:60:70:59:86:96:4a:78:00:79:ca:e0:95:88:42:f0 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.ashesi.edu.gh

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:60:70:59:86:96:4a:78:00:79:ca:e0:95:88:42:f0
Serial Number (int): 21768387153812752033179104851977061104
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): b2:35:2b:2f:3c:96:af:12:c6:70:70:0c:94:c9:35:e7:9e:03:4c:e1
Fingerprint (sha256): 5d:e3:25:8f:fb:ed:f6:9d:72:9f:ec:c4:40:d1:fb:0b:e3:cf:4d:c2:cb:15:06:52:38:8d:75:8c:b1:9e:47:28

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate www.ashesi.edu.gh

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ashesi.edu.gh

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ashesi.edu.gh
ashesi.edu.gh

Other certificates including the domain name ashesi.edu.gh

(limited to 100 certificates)
*.ashesi.edu.gh
admissions.ashesi.edu.gh
outcomes.ashesi.edu.gh
*.ashesi.edu.gh
nms.ashesi.edu.gh
perfcore.ashesi.edu.gh
outcomes.ashesi.edu.gh
air.ashesi.edu.gh
at.ashesi.edu.gh
air.ashesi.edu.gh
outcomes.ashesi.edu.gh
at.ashesi.edu.gh
*.ashesi.edu.gh
educationcollab.ashesi.edu.gh
archives.ashesi.edu.gh
incapsula.com
admissions.ashesi.edu.gh
un-sdgs.ashesi.edu.gh
librenms.ashesi.edu.gh
at.ashesi.edu.gh
incapsula.com
librenms.ashesi.edu.gh
ashesi.edu.gh
*.ashesi.edu.gh
mplan.ashesi.edu.gh
archives.ashesi.edu.gh
outcomes.ashesi.edu.gh
netbox.ashesi.edu.gh
seed.ashesi.edu.gh
www.ashesi.edu.gh
at.ashesi.edu.gh
ashesi.edu.gh
at.ashesi.edu.gh
admissions.ashesi.edu.gh
librenms.ashesi.edu.gh
admissions.ashesi.edu.gh
air.ashesi.edu.gh
*.ashesi.edu.gh
at.ashesi.edu.gh
admissions.ashesi.edu.gh
seed.ashesi.edu.gh
*.ashesi.edu.gh
librenms.ashesi.edu.gh
apps.ashesi.edu.gh
*.ashesi.edu.gh
radio.ashesi.edu.gh
admissions.ashesi.edu.gh
perfbore.ashesi.edu.gh
*.ashesi.edu.gh
perfcore.ashesi.edu.gh
nms.ashesi.edu.gh
*.ashesi.edu.gh
www.ashesi.edu.gh
www.ashesi.edu.gh
outlook.ashesi.edu.gh
at.ashesi.edu.gh
outcomes.ashesi.edu.gh
admissions.ashesi.edu.gh
admissions.ashesi.edu.gh
librenms.ashesi.edu.gh
outcomes.ashesi.edu.gh
outcomes.ashesi.edu.gh
www.ashesi.edu.gh
perfcore.ashesi.edu.gh
perfcore.ashesi.edu.gh
sis.ashesi.edu.gh
air.ashesi.edu.gh
admissions.ashesi.edu.gh
admissions.ashesi.edu.gh
air.ashesi.edu.gh
ashesi.edu.gh
www.ashesi.edu.gh
ashesi.bywatersolutions.com
incapsula.com
incapsula.com
*.ashesi.edu.gh
outcomes.ashesi.edu.gh
at.ashesi.edu.gh
radio.ashesi.edu.gh
air.ashesi.edu.gh
incapsula.com
journal.ashesi.edu.gh
perfcore.ashesi.edu.gh
admissions.ashesi.edu.gh
www.ashesi.edu.gh

Certificate

The complete raw certificate details for www.ashesi.edu.gh in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs32DMKhAx3r3mxS7Yhlk
vyADE6mCxTOXT1xfNPr3cWliDy7Mc49Mykaw75+2FoPKrFkKJnr+Qe6v4gacefgN
OaCb68yq1GbIZ6zssJ72kv7KEd9IVUfNotvJk8iSORgcqpT+ubbntwT+MhL2a7Za
cBDntNQMJKIiJe+Yw5knwvEfcy9h9pNq7LbH0p9xqJMjeJHssI3fIvg3IgylQcEs
Dn8EKo3J014Fh8zcgmKzkkzOtX9V9svjruiEZIYGb63Ufm5Axh9JAm/VJleVpNHC
gz96R/6LG/502seLArvJpE/Y8ijEANUydlrp6gutw/L4+Yy3XgFr+TND/omnhH7Y
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21768387153812752033179104851977061104
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ashesi.edu.gh'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22658549090307595358555654138155602143956115869766404489307364028042146378336194880523639187700447610344808655913826839806354506305090879087712008907790184461319463627927448224997921613647952443754487338993338283182796749128260051302719732306082680378516632069932007028953465986860462210172117780193212055103434864101977599762873355985448208352410913443810206510237676534806944692840228328981472308921342641478045402300029319889479066627199781710385795506255217847985740667562473822531802344909455644481454484049046865925025284758994273264831040269350529294404427687373935045760249176001503429777133525605607733647577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashesi.edu.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashesi.edu.gh'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015ba40ad3ce00000403004730450220454011a933d3a15618c5b82b55932b50c97b6bad7a7cb9668480aa60564a92e20221009642ed6d5382849611a3854b3b1068de8084d57e805b7b57749d0a4ef80c966d007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015ba40ad3eb0000040300473045022100d42df3973e3664118ff5a96b65e66913a49ca9010b1f73441e99c8979c564e7d02203a1775f4bdfc19862fa18215100f08363122c223f0151d2555c4451d8b32ccb4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003a801556ad007b5665411b20213a8684bc033ec682f22a9026acb7927fdb99030b09d64c742f9277ec85d1516fe6912b33532395657dcaeb2acfff463d8be6cb147961d3108e09e70eb2ea8afbbecb85ff028dfb1c5971bdbb923036875bb41c72cd6f86e35d7fa7b196930eae37948969bbeae7c2d6ff7a08011d00085ee8cf5da7cc61266bd7ac178bf52c69c0432d315ce979750c5b2d66dd42e1e9c5891b9a2d17536fef6863a3d6a9ec1b41b6136d495e3bf301c52d4a1b28d5dace7c0db8c0ab1c513375f50cf8d6510d30f8184793cc0f71f16da607a335de375ddd3ffb035f44cb9e01b6b287661166f6f8d1315fb7c37eeab7a1c7214bf7b2122e28