millennium.seals.ac.za

- South East Academic Libraries System Trust -

Issued by DigiCert Secure Server CA

About this certificate

This digital certificate with serial number 06:22:ef:3e:92:87:22:19:81:04:b5:5f:80:aa:3b:d6 was issued on by DigiCert Inc.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

South East Academic Libraries System Trust

Organization: South East Academic Libraries System Trust
State / Province: Port Elizabeth
Locality: Humewood
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:22:ef:3e:92:87:22:19:81:04:b5:5f:80:aa:3b:d6
Serial Number (int): 8156758521289205460903262765321960406
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e8:d8:6d:46:e1:59:6c:3e:8a:9c:79:a8:03:f5:69:e9:f1:e6:c9:fa
AuthorityKeyId: 90:71:db:37:eb:73:c8:ef:dc:d5:1e:12:b6:34:ba:2b:5a:a0:a6:92

Fingerprint (sha1): ea:e9:4c:07:a6:79:2f:83:c3:8d:62:2d:6b:2b:fb:4b:a9:23:54:8b
Fingerprint (sha256): d2:4d:ca:95:1c:99:12:b8:85:f7:4a:ca:67:14:9b:2e:d6:3b:30:6e:ea:fc:93:09:9f:84:c7:b0:81:95:9c:4a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-g6.crl

Check the revocation status for certificate millennium.seals.ac.za

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for millennium.seals.ac.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

millennium.seals.ac.za
sierradb.seals.ac.za
encore.seals.ac.za
opac.seals.ac.za
m.opac.seals.ac.za
wam.seals.ac.za
0-www.bioone.org.wam.seals.ac.za
0-pubs.acs.org.wam.seals.ac.za
0-ticket.iop.org.wam.seals.ac.za
0-www.sciencedirect.com.wam.seals.ac.za
0-www.jstor.org.wam.seals.ac.za
0-www.thieme-connect.com.wam.seals.ac.za
0-www.refworks.com.wam.seals.ac.za
0-dl.acm.org.wam.seals.ac.za
0-www.scopus.com.wam.seals.ac.za
0-wcs.webofknowledge.com.wam.seals.ac.za
0-apps.webofknowledge.com.wam.seals.ac.za

Other certificates including the domain name seals.ac.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for millennium.seals.ac.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKkPzdneqU4I/8wD3Cjk
8WxD15pO4a92qyrL8hPrEtCgg67+qPQb01kw25aO9P2vC4wYb4rGtlLePjWnTcAI
YyARJyPlFyU3jt2jg+RhNZclldfVScOUPsUPXQ7gRc80CJ2CDtYtK9hV2ZmRoHQX
IpFl8vnJeH5G6pSpIc6fd8FpUpwH/xzI2y7VdiPxCOHU6PBVVoI9IJeU5oPjRnfh
qDlK+YqSFrOqzEf7M6BQBiAdVpzysO9sIR/xiDUmeeTIm4U6+TNTD0JRSczTFUra
ybmp07FzLCMZrPrJEKpk6q8C67JKBlZ03yi36Mvx1yTey3VATjp97+LcX/zZAVTh
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8156758521289205460903262765321960406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Port Elizabeth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Humewood'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South East Academic Libraries System Trust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'millennium.seals.ac.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23816168782190248497056621293144188375358196784955738457484491152664779400003528873830606889801566643821173241812105672960360146166091065476951405238980711462320255570898545862787640503456009582183601882191981018789339700055592437161883794011076039462229596794520826761477666990258974706043688270125108089340763969115784169575438858175104208692185495683565049134342319209287556355659951847064031605075803126104193655910245804771314475584622188181096473464289781171106939791791270907698811194801898040214685708824377591962007822998316613001734741369758548032203494591886090649212301729694487817473020037024576309616989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9071db37eb73c8efdcd51e12b634ba2b5aa0a692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8d86d46e1596c3e8a9c79a803f569e9f1e6c9fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (526 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millennium.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierradb.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encore.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opac.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.opac.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wam.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.bioone.org.wam.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-pubs.acs.org.wam.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-ticket.iop.org.wam.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.sciencedirect.com.wam.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.jstor.org.wam.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.thieme-connect.com.wam.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.refworks.com.wam.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-dl.acm.org.wam.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.scopus.com.wam.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-wcs.webofknowledge.com.wam.seals.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-apps.webofknowledge.com.wam.seals.ac.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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