*.foothill.edu

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 07:bd:06:62:c6:d3:ff:17:a9:a8:34:ff:24:7a:70:01 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.foothill.edu

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:bd:06:62:c6:d3:ff:17:a9:a8:34:ff:24:7a:70:01
Serial Number (int): 10286069597109361772564876356149211137
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 25:bf:2f:0c:80:28:75:0e:c1:93:9e:2a:a1:42:75:f4:ec:09:fa:48
Fingerprint (sha256): c0:3e:9b:b0:bb:4a:9d:19:79:8e:46:ad:d7:ed:72:05:ac:62:35:0a:70:a5:c9:a1:d1:9b:48:10:7a:ce:50:3f

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate *.foothill.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.foothill.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.foothill.edu
foothill.edu

Other certificates including the domain name foothill.edu

(limited to 100 certificates)
*.foothill.edu
vlab.vdi.foothill.edu
cs.psme.foothill.edu
www.psme.foothill.edu
fhcounseling.foothill.edu
sarsanywhere.foothill.edu
psme.foothill.edu
fhsearch.foothill.edu
*.foothill.edu
mydesktop.foothill.edu
cs.psme.foothill.edu
hub.foothill.edu
sarsanywhere.foothill.edu
hub.foothill.edu
mydesktopsunnyvale.foothill.edu
cs.psme.foothill.edu
*.foothill.edu
fhcounseling.foothill.edu
fhcounseling.foothill.edu
psme.foothill.edu
cs.psme.foothill.edu
fhsearch.foothill.edu
www.psme.foothill.edu
cs.psme.foothill.edu
*.foothill.edu
fhcounseling.foothill.edu
mydesktopsunnyvale.foothill.edu
mydesktopsunnyvale.foothill.edu
*.foothill.edu
*.foothill.edu
fhcounseling.foothill.edu
mydesktopsunnyvale.foothill.edu
*.foothill.edu
catalog.foothill.edu
HUB.FOOTHILL.EDU
*.foothill.edu
*.foothill.edu
www.psme.foothill.edu
webwork.foothill.edu
sarsanywhere.foothill.edu
*.foothill.edu
webwork.foothill.edu
fhcounseling.foothill.edu
catalog.foothill.edu
sarsanywhere.foothill.edu
webwork.foothill.edu
*.foothill.edu
*.foothill.edu

Certificate

The complete raw certificate details for *.foothill.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31k7edHu+LhnM1BWzYla
QJLfri6z9sJyBpihEn4M2rDkFLVM16Ii85hunyjU5egfoiU7vi9EmnKF2ZH5qLtP
gnYcTG5OrQgzH2TuEXQIvCJtuGOpVHzwaBNDG132cH3ZJgIp6ge6EQSVS3S2FBPO
MP2atUiTgOqm8/CaMxIfEBXmcSSQv2tyFIeUeikpfXiRPPGP7dEfBDNTW6cO7UuS
CVO7WINH61rbxnXHIH1Y+Br5pZYwRr49upz40gVgR05yyJGNlEWJMV6SZnwoI3xM
G1CyQc8g4QiwQWHsuoZT8oh+OtGvJqVia4wIk5oWJqV6PRsQvTMv7tW+iZTOGqh0
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10286069597109361772564876356149211137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.foothill.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28195144108139790878437997402432908472482398259448352996390277660753822004523502580447971605223388823037767830581654930989189429951131951910298791738541059342070111746484649261437682788423645883997452869945835289444284196681338073766999513951689979963213991066229669007383705099069961985984514220503583385618067091174635502650326941028881771018555795304184751581737346962035445721758208905940165180991683212632993268229060914768783189644700861840655630749899080236386190454727770037094158634497476780246626393505461763121446734785647260938125644789422885317885473917710194550897946694525016964382247259695246448555117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foothill.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foothill.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000aa55fa9a045c1856163c9d3a712d512409a25fe6505d7f3f5948b2e0c96a8fa639a800789c748948f36ba3073e6ee1057b17ce793ce16b5ac694484239c0bfc24ec14a0f644180352cb7d91b326f41ae56ff072c4f98f734777005e66384e47c7d4b7804b83a4450bbfb9bc68e301774edc8def5c9cb9fcf129115b3a894cc89c10d04b30fd1c26dc2363823cbf5f0e8489cbcadadc95483088de43c432b3474b5743361d5b445f65a1a5055e0ea8e00d643c55a5a5b5cf52698bc2af390d5723785a6c8ccec19aeeb2888a9edf4a6dd62d1b947317acbc25390196133697ade90a1731c1452a6515e89ce0256e1770d9f3ad5e84ff9c8cc7e05e45335b324d