ess.mhi.ca

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:c7:1e:b9:d5:c8:16:57:bf:9c:07:5f:d4:3d:36:fa was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ess.mhi.ca

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c7:1e:b9:d5:c8:16:57:bf:9c:07:5f:d4:3d:36:fa
Serial Number (int): 2363118266293719026602250736984995578
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c6:0b:81:d8:bd:43:ab:9b:b2:a3:68:dc:b5:22:88:49:91:1e:a5:d5
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 1f:d3:e4:3c:2a:59:12:4e:67:36:dc:9c:88:8f:55:e7:14:c1:1d:68
Fingerprint (sha256): 74:11:90:1c:7c:ba:23:51:29:7c:d0:f6:0d:41:4e:d1:ff:84:18:70:05:4d:20:c8:0e:90:a5:6f:6f:49:fb:6f

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ess.mhi.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ess.mhi.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ess.mhi.ca

Other certificates including the domain name mhi.ca

(limited to 100 certificates)
ftps.mhi.ca
mhi.ca
inportal.mhi.ca
mhi.ca
mhi.ca
vpn.mhi.ca
mhi.ca
time.mhi.ca
mhi.ca
vpn.mhi.ca
mhi.ca
mhi.ca
mhi.ca
ess.mhi.ca
spam.mhi.ca
ess.mhi.ca
mhi.ca
ess.mhi.ca
spam.mhi.ca
vpn.mhi.ca
mhi.ca
portal.mhi.ca
mhi.ca
mhi.ca
portal.mhi.ca
spam.mhi.ca
hrms.mhi.ca
ftps.mhi.ca
inportal.mhi.ca
ess.mhi.ca
mhi.ca
mhi.ca
mhi.ca
spam.mhi.ca
vpn.mhi.ca
spam.mhi.ca
*.mhi.ca
training.mhi.ca
hvdc.ca
hvdc.ca
hrms.mhi.ca
vpn.mhi.ca
*.mhi.ca
mhi.ca
spam.mhi.ca
ftps.mhi.ca
mhi.ca
mhi.ca
mhi.ca
spam.mhi.ca
hrms.mhi.ca
mhi.ca
mhi.ca
mhi.ca
mhi.ca
training.mhi.ca
hrms.mhi.ca
vpn.mhi.ca
mhi.ca
mhi.ca
portal.mhi.ca
mhi.ca
mhi.ca
time.mhi.ca
mhi.ca
mhi.ca

Certificate

The complete raw certificate details for ess.mhi.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE+nyOBTsQcn/ftNm1Vf
CdpZaP6ZXsnnRVUpNOdN6Hy7/vtobBYhU+/hza134Yi32X/SPxX53oQKAQ5VQjwI
WPTwUo1XtpqSq1XVAl+z0WLtMbyhJuuYek5U8K0sWxPw/9I4PwlhYp/VnSppmsK7
CVNnNQFCg1AtprMnUs23KDJg8nunuDLw7WamSRbJ0HCZ3rwosybpinHXzjhuKzTH
+71wwRzUU1JNSJFUiOKMIj6B+avZMP+oGwv+H4aQEklC4Np2Wm2NhsrTAg2t2ndI
ke2GzVhROUbNTk/AgsA0y/Kgu/BtBDuI5D9GlzyWL5//+SqgnU+l1WmFjAAnEsKk
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2363118266293719026602250736984995578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ess.mhi.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21247314780384685776694474218072855358299705878651854086721659706667618279612764497616376498299518953396290816029362807186611811377423567574920239867665603447598779190279797970029772628741987711165926625605063900107731857323698678472327920673467170767295634143942992220475526221763527545461763771576253408204643703701200785615184478643668137340707185255064740179241054157444121239634060798862823447202577664623686444053349842029509228183602210727182142771513217055580827348514982863974943861866107137653774025097316755768636579783214421719076700664187561367636225696253172849553800353564086922181955162179495977460857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c60b81d8bd43ab9bb2a368dcb5228849911ea5d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess.mhi.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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