community.smcm.edu

- St. Mary’s College of Maryland -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:a0:56:08:26:69:2f:f5:f8:37:17:87:a2:b0:a4:cc was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

St. Mary’s College of Maryland

Organization: St. Mary’s College of Maryland
Organization unit: Office of Alumni Relations
State / Province: Maryland
Locality: St. Marys City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:56:08:26:69:2f:f5:f8:37:17:87:a2:b0:a4:cc
Serial Number (int): 4820196417659128269880892728972190924
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3a:38:d3:d8:f9:49:32:16:43:29:47:bd:89:bd:8d:ab:9f:47:6f:ea
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 8d:e0:b8:0c:a5:c0:c6:a5:41:48:3c:71:81:85:69:15:9d:ca:fe:ed
Fingerprint (sha256): 78:96:8c:6a:e0:b9:a3:b6:98:92:26:c7:7a:4b:d8:60:40:a2:52:b2:6a:cb:ab:60:c6:f2:46:c3:3e:c4:92:5e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate community.smcm.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for community.smcm.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

community.smcm.edu

Other certificates including the domain name smcm.edu

(limited to 100 certificates)
ithelpdesk.endologix.com
clearpass2.smcm.edu
libanswers.smcm.edu
helpdesk.enableinjections.com
*.smcm.edu
*.smcm.edu
helpdesk.dpsgroupglobal.com
inside.smcm.edu
libguides.smcm.edu
apply.smcm.edu
*.smcm.edu
*.smcm.edu
ithelpdesk.endologix.com
openhouse.smcm.edu
support.unpri.org
afford.smcm.edu
ithelpdesk.endologix.com
*.smcm.edu
afford.smcm.edu
*.smcm.edu
*.smcm.edu
afford.smcm.edu
ithelpdesk.endologix.com
ithelpdesk.endologix.com
*.smcm.edu
blackboard.smcm.edu
seahawks.smcm.edu
helpdesk.dpsgroupglobal.com
*.smcm.edu
*.smcm.edu
webmail.smcm.edu
*.smcm.edu
helpdesk.dpsgroupglobal.com
ithelpdesk.endologix.com
support.smcm.edu
*.smcm.edu
*.smcm.edu
support.unpri.org
ithelpdesk.endologix.com
*.smcm.edu
info.nysid.edu
blackboard.smcm.edu
clearpass2.smcm.edu
support.unpri.org
*.smcm.edu
*.smcm.edu
*.smcm.edu
ithelpdesk.endologix.com
ithelpdesk.endologix.com
netradius.smcm.edu
*.smcm.edu
*.smcm.edu
www.smcm.edu
apply.smcm.edu
helpdesk.dpsgroupglobal.com
blackboard.smcm.edu
*.smcm.edu
*.smcm.edu
clearpass1.smcm.edu
*.smcm.edu
ithelpdesk.endologix.com
support.unpri.org
*.smcm.edu
*.smcm.edu
*.smcm.edu
inside.smcm.edu
libguides.smcm.edu
*.smcm.edu
WWW.SMCM.EDU
webmail.smcm.edu
*.smcm.edu
helpdesk.dpsgroupglobal.com
ithelpdesk.endologix.com
libguides.smcm.edu
*.smcm.edu
helpdesk.dpsgroupglobal.com
blackboard.smcm.edu
*.smcm.edu
*.smcm.edu
community.smcm.edu
*.smcm.edu
servicedesk.acdlabs.com
*.smcm.edu
*.smcm.edu
netradius2.smcm.edu
*.smcm.edu
apply.smcm.edu
ithelpdesk.endologix.com
ithelpdesk.endologix.com
*.smcm.edu
openhouse.smcm.edu
ithelpdesk.endologix.com
admitted.smcm.edu
ithelpdesk.endologix.com
*.smcm.edu
*.smcm.edu
support.unpri.org
inside.smcm.edu
servicedesk.smcm.edu
helpdesk.icebreaker.com

Certificate

The complete raw certificate details for community.smcm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLmY3Ywa/E3lRd39mQpi
YU3SD/xG6cjIEDP6WqQgGlQBcqETRh0lDT7k28J1z0wLTlqu/bJoPMd/kHwXTLr/
zoFikmJlQhp9gzrbeM62EvpViSIQ1rKUEidLLih7mhuso+wiQnkp6Mc6QYoTCABF
BJkZMCwUEWoC4Ll+h7ykyuurWANLyr9BFSSXIS5cdpa4S0msOJFEjbAzXNxjaoxS
PvoMihd9CTWrz5WJMcF66l/YDie8TG/sla8hl5SfN3ICNXXCPHfRenm9PXw0evaO
ImSHQA9a4Zm2Ueu9jfzqtcAnEWs7vZXxShhdSyzzJwCFjWXvgIIO90W+TaPsKxI+
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4820196417659128269880892728972190924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Marys City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'St. Mary’s College of Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Office of Alumni Relations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'community.smcm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22309463030144882117629740507872681442289461333070232482662548911141596560568954235046520183944947780195478901530904734530560773332511612552509126638502880005221498295986466662357174472765688392879422882499095621767464594959514586435467629938008435152722813516565715606688869104130909759749382715666083802415791135810141233727797633050974510106827396584390904392745730360684650538032065090007294172965534247486176702052635461042237282037592047779101762089770939073315989060376232140567356122134000464767566702078677785959555972227764028825410229113533864680262698106192980381295349781409103395604508566638092239388267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a38d3d8f9493216432947bd89bd8dab9f476fea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.smcm.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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