*.ciachef.edu

- Culinary Institute of America 697 -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:1e:bb:34:b8:4c:79:fb:d6:29:e6:36:1b:bb:17:50 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Culinary Institute of America 697

Organization: Culinary Institute of America 697
State / Province: New York
Locality: Hyde Park
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:1e:bb:34:b8:4c:79:fb:d6:29:e6:36:1b:bb:17:50
Serial Number (int): 17439529838457981002047752582832265040
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3b:b0:eb:96:b1:10:ea:bf:ab:65:83:7f:15:bd:e4:18:dd:5e:ad:e4
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 9d:9c:45:7c:6d:bc:71:bc:2c:3b:60:03:8b:2f:dd:7e:03:b3:71:94
Fingerprint (sha256): 5f:94:80:e6:c4:1e:b1:70:76:2c:30:74:5f:85:d1:cc:69:ef:fa:ab:dc:aa:26:fd:28:e9:60:27:4a:ff:23:85

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.ciachef.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ciachef.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ciachef.edu
ciachef.edu

Other certificates including the domain name ciachef.edu

(limited to 100 certificates)
blog.ciachef.edu
info.ciachef.edu
info.ciachef.edu
blog.ciachef.edu
apply.ciachef.edu
info.ciachef.edu
blog.ciachef.edu
SECURE.CIACHEF.EDU
blog.ciachef.edu
info.ciachef.edu
catalog.ciachef.edu
learn.ciachef.edu
apply.ciachef.edu
SECURE.CIACHEF.EDU
*.ciachef.edu
learn.ciachef.edu
blog.ciachef.edu
learn.ciachef.edu
learn.ciachef.edu
blog.ciachef.edu
learn.ciachef.edu
learn.ciachef.edu
info.ciachef.edu
www.ciachef.edu
blog.ciachef.edu
*.ciachef.edu
catalog.ciachef.edu
www.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
info.ciachef.edu
apply.ciachef.edu
blog.ciachef.edu
catalog.ciachef.edu
info.ciachef.edu
*.ciachef.edu
blog.ciachef.edu
*.ciachef.edu
apply.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
learn.ciachef.edu
blog.ciachef.edu
info.ciachef.edu
www.ciachef.edu
*.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
*.ciachef.edu
info.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
*.ciachef.edu
blog.ciachef.edu
info.ciachef.edu
catalog.ciachef.edu
blog.ciachef.edu
apply.ciachef.edu
learn.ciachef.edu
blog.ciachef.edu

Certificate

The complete raw certificate details for *.ciachef.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9l87zxABvVpSRc9XrKbK
m4YVwP6polqUzN13He9kazz9htzrpElQvBX3QnzJ8/QjGiYVgzTiIj1Zcz/0HmCb
UmbRT0+6Q0T69EHx61MJSwTR7h62FFMvI43PG0Ca8Lg0tBJnT0tMiFx0qLouzG+L
2tecyLIUizG0jVX6/MnbxerScnYBAodb0+0FZ/YgsKeYtcd5kCaQUpboOphXN9Sd
cIBFrNAzh/F6neOWiZ89c43IhnoQPUw3gT0t433m//PM8HhiIPcf2yg58DRPWXh3
pwOvVqWTqY8fEDFcKjSz0OfTDCdLZI+nnlU9SvjuGc4KQntbrPUM3Lg4PCOofra5
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17439529838457981002047752582832265040
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hyde Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culinary Institute of America 697'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ciachef.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31101584474029341638479236811192133788640121528716714441326508572647958792234484894229521999290476352445596940286315282089599498095134255835001542646671941303029247819376351038611399633313915835215931060505166157874409797029361951092655299012675779402928565863965376211787789895250822564370858853937556182742750340253299648579695199181125415819047297698210908332537014978505572151536686084474239405988171345675990835019306380994247486128817447110516158461064217652070400966418690355537118252753870766029052037320700180644360299177486153187844529476036620802449131489076235467192009691268736878827227238459069787716077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bb0eb96b110eabfab65837f15bde418dd5eade4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciachef.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciachef.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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