sso.nocccd.edu

- North Orange County Community College District -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 26:e9:97:e0:2b:78:12:53:d9:5d:cd:97:98:60:33:58 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

North Orange County Community College District

Organization: North Orange County Community College District
Organization unit: Information Services
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: California
Locality: Anaheim
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:e9:97:e0:2b:78:12:53:d9:5d:cd:97:98:60:33:58
Serial Number (int): 51723549412276985675248855281832047448
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): ea:7c:05:94:7f:2e:8e:24:8f:13:a6:57:e4:5a:9b:28:99:11:7d:1c
Fingerprint (sha256): 9e:bc:71:cc:b5:49:ea:01:a0:b8:2b:31:be:57:c6:a1:58:d3:10:5a:30:bf:a8:df:c1:bd:7f:bd:c6:d1:9f:ad

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate sso.nocccd.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sso.nocccd.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sso.nocccd.edu

Other certificates including the domain name nocccd.edu

(limited to 100 certificates)
nocccd.edu
catalog.nocccd.edu
ezproxy.ccclib.nocccd.edu
mg.nocccd.edu
ezproxy.occlib.nocccd.edu
www.nocccd.edu
knowledge.nocccd.edu
webauth.nocccd.edu
www.webstar-test.nocccd.edu
tableau.nocccd.edu
argos.nocccd.edu
fcblackboard.nocccd.edu
argos.nocccd.edu
tableau.nocccd.edu
sso.nocccd.edu
mg5.nocccd.edu
sso.nocccd.edu
www.webstar-test.nocccd.edu
ezproxy.cyclib.nocccd.edu
www.webstar.nocccd.edu
bookit.nocccd.edu
*.nocccd.edu
homer.nocccd.edu
sso.nocccd.edu
cas.nocccd.edu
knowledge.nocccd.edu
dw.nocccd.edu
banpprd.nocccd.edu
fcblackboard.nocccd.edu
webauth.nocccd.edu
clockwork.nocccd.edu
mg.nocccd.edu
ezproxy.ccclib.nocccd.edu
blackboard.nocccd.edu
service.nocccd.edu
bookit.nocccd.edu
nocccd.edu
dwtestweb.nocccd.edu
mobile.nocccd.edu
mobile.nocccd.edu
www.webstar.nocccd.edu
fcblackboard.nocccd.edu
cas.nocccd.edu
banpprd.nocccd.edu
www.webstar.nocccd.edu
ezproxy.occlib.nocccd.edu
clockwork.nocccd.edu
bookit.nocccd.edu
dw.nocccd.edu
argos.nocccd.edu
*.nocccd.edu
sso.nocccd.edu
portalguard.test.nocccd.edu
mygateway.nocccd.edu
nocccdvpn.nocccd.edu
service.nocccd.edu
knowledge.nocccd.edu
banneradmin.nocccd.edu
cas.nocccd.edu
www.nocccd.edu
*.nocccd.edu
ems-app-test.nocccd.edu
www.nocccd.edu
service.nocccd.edu
service.nocccd.edu
fcblackboard.nocccd.edu
ezproxy.gwclib.nocccd.edu
mygateway.nocccd.edu
argos.nocccd.edu
flow.mg-preview.nocccd.edu
www.webstar-test.nocccd.edu
obt-app.nocccd.edu
spms.nocccd.edu
service.nocccd.edu
blackboard.nocccd.edu
sso.nocccd.edu
ems-app-test.nocccd.edu
portalguard.test.nocccd.edu
catalog.nocccd.edu
rh-mygateway.nocccd.edu
flow.mg-preview.nocccd.edu
knowledge.nocccd.edu
webauth.nocccd.edu
flow.nocccd.pathify.com
auxservicesprod.nocccd.edu
service.nocccd.edu
banneradmin.nocccd.edu
clockwork.nocccd.edu
webauth.nocccd.edu
sso.nocccd.edu
rh-mygateway.nocccd.edu
bookit.nocccd.edu
ezproxy.gwclib.nocccd.edu
bantest.nocccd.edu
event.nocccd.edu
maint.nocccd.edu
ezproxy.fcclib.nocccd.edu
mg.nocccd.edu
nocccd.edu
blackboard.nocccd.edu

Certificate

The complete raw certificate details for sso.nocccd.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKLq5tteFeXVXTsr06yz
SsNw7Fyn3HDKovnKwa0ae4xIBTZxH1xYHByqZIA6k4TyHxNv3+nn+0nWOskil9S1
1Dg0DyERFH2JpA7YTypyAFHT8Etzr0rbTvE0uReUbkXC4HC3FXAMJjkt51vubVbS
Ag40mZv6iOswKJONukJN/sfloTfudFk8894qCgoeyfEV9dRsXvTRSpXwum8M07IR
S1vw6z4yEAY/D83LpZkTtXYTCAreo004pHNDq1g3TdLZhhrJ1OyZecmSUgRuLJQR
I3STy51djXK1i7rB2Wv49jQOYk8ok+3pFTB2Vss21TkSC7lQXxqEN4xHg/5ILjPq
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51723549412276985675248855281832047448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Anaheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'North Orange County Community College District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Information Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'sso.nocccd.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21288372889734507143306796618891767144631993016869418354815807238260192697055088250620659493552303825576184088694481576635058531777082384137525524893553965108269889414373044943066655270848017209979102646047386529154547492543755971483959998999651455958783508657059725339995043275542643218700379556323694158096927079022650163080694654825324430331165839912857109726268494549743701897035323465457547421908248958766570318326669607107647281978751934604313173307167615109486220105454031585059119006833260372548677148949000242065016321868766953870490462132421878750398463328099522016241776435754940405004160881437128636230373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.nocccd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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