*.coh.org

- City of Hope -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:6f:5a:46:ba:ab:5a:ae:e2:e1:15:a6:c5:28:94:49 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Hope

Organization: City of Hope
State / Province: CA
Locality: Duarte
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:6f:5a:46:ba:ab:5a:ae:e2:e1:15:a6:c5:28:94:49
Serial Number (int): 16528911921323427371443940010163213385
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2c:98:e2:1f:b5:8e:24:8e:9d:03:a9:5d:a9:a7:80:52:62:ee:ef:00
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 73:1c:c8:d6:a9:09:0b:ec:f8:09:5b:8b:8e:17:96:fd:44:d6:fd:b6
Fingerprint (sha256): 74:91:de:79:af:01:1b:2f:e1:28:ba:90:37:4a:dd:2f:a9:b3:ee:09:27:ca:69:7e:7d:71:cb:d2:ea:ab:9e:f5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate *.coh.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.coh.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.coh.org
coh.org
ebi.coh.org

Other certificates including the domain name coh.org

(limited to 100 certificates)
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
email.coh.org
www.infosci.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
duo.coh.org
*.coh.org
infosci.coh.org
*.coh.org
*.coh.org
*.coh.org
san-13-s10.tlsprovisioning.exacttarget.com
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
share.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
email.coh.org
benefitexpress.coh.org
*.coh.org
*.coh.org
*.coh.org
san-10-s12.tlsprovisioning.exacttarget.com
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
securelink.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
email.coh.org
disreport.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
webext.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
libguides.library.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org

Certificate

The complete raw certificate details for *.coh.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16528911921323427371443940010163213385
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Duarte'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Hope'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.coh.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778041054639822412377025069734175830910303648138739992596785728324008569979361446072462641647389791478699638835334985511306067360725015893239489274082720612542527671377665031838872221299449933910642316201647190545551252865706658932148483740130661121048548249724952233798998051383092177791661509801794076266769384287337410392754537317552117987047806037564364234040728254756297163558598242118661781514274330882861160026803202043199372958474983481919906635177238192577667333146544339428461736297603808100320934608839872108959134353265724732523959002006199634600806017522879506604704866585075026979654860924083902783159405719780649677431772437155539608535908600716882984736421415813807877137202793274239778347133846335380664210473718313730858851604605850544719813297431687409056955666114165483546408775846190079359840751549484604226493349731446157546022643814045885526123430220869799616968936111007222096293078979117547695029787262871627957301645482538322005949256475636437759191679552678114228855848782811554214455141256470434001480148586811981030812209741259159745419568360831653404257105560565212203809340159877531621187127423205525281370097834352548420959740495455458375454153490759255316998859326103748953332867052845948816817017981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c98e21fb58e248e9d03a95da9a7805262eeef00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebi.coh.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00116b2901c7dcfbe9d74f7b53296b4f1fbd0e0acf3d0540ed246f0ef07bdcd39afeb8f58e91a9b9e9bb7a7dc12747455ee09510153a5afa9ef2826413e336a3fc3882227d5b85e549b9f2a63152facd23243aed29aae507baad354f9cc436e60156b1a557bc53d4b698b4fc71b086ef63e6770539df3c497031d61f15fdcfb6f8569afb32edd4d53a89b87020f27bc4e7663e587c43335ede6bd19cd18557e1e61f6f077b2d34e6dad7d24d4fd26551e05ebaf6b0a639d64c3a9c2b532c0e094a45e495fd1e111fbe3a2296b41502e4fe7e681f5ff74ff08a36351c94249b952abf7e2f95a9e0e2b3abc8b47a0685dfa8604ab427cabb1e6a8bc4635ae091b064