exmail.hkct.edu.hk

- Hong Kong College of Technology -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:d8:36:b3:75:4c:32:0a:e7:10:27:92:d4:37:23:a8 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hong Kong College of Technology

Organization: Hong Kong College of Technology
State / Province: HK
Locality: Ho Man Tin
Country: HK

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:d8:36:b3:75:4c:32:0a:e7:10:27:92:d4:37:23:a8
Serial Number (int): 21061065526478808935668535918654333864
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 57:8a:c8:08:c3:05:f9:85:99:be:7b:bb:66:ce:85:bf:ef:64:5b:94
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 7f:6f:2c:94:7d:67:74:dc:7c:73:6b:42:77:25:ab:a3:32:1b:e9:e7
Fingerprint (sha256): f7:db:65:f5:57:92:4e:bb:45:d5:d0:b6:d2:2b:68:be:86:c7:dc:3d:b3:7f:8d:24:42:75:4f:95:b6:3a:e8:81

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g3.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g3.crl

Check the revocation status for certificate exmail.hkct.edu.hk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exmail.hkct.edu.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exmail.hkct.edu.hk
autodiscover.hkct.edu.hk
autodiscover.ctihe.edu.hk

Other certificates including the domain name hkct.edu.hk

(limited to 100 certificates)
svt.hkct.edu.hk
helpdesk.it.hkct.edu.hk
svt.hkct.edu.hk
enrol.hkct.edu.hk
helpdesk.it.hkct.edu.hk
helpdesk.it.hkct.edu.hk
orsapps.hkct.edu.hk
enrol.hkct.edu.hk
www.hkct.edu.hk
helpdesk.it.hkct.edu.hk
enrol.hkct.edu.hk
www.hkct.edu.hk
elearn.hkct.edu.hk
ctpower.hkct.edu.hk
svt.hkct.edu.hk
hkcc.hkct.edu.hk
exmail.hkct.edu.hk
enrol.hkct.edu.hk
elearn.hkct.edu.hk
orsapps.hkct.edu.hk
ctpower.hkct.edu.hk
orsapps.hkct.edu.hk
*.hkct.edu.hk
*.hkct.edu.hk
exmail.hkct.edu.hk
elearn.hkct.edu.hk
elearn.hkct.edu.hk
*.hkct.edu.hk
sso.hkct.edu.hk
orsapps.hkct.edu.hk
hkct.edu.hk
www.hkct.edu.hk
enrol.hkct.edu.hk
helpdesk.it.hkct.edu.hk
apply.hkct.edu.hk
helpdesk.it.hkct.edu.hk
www.hkct.edu.hk
www.hkct.edu.hk
hkct.edu.hk
*.hkct.edu.hk
enrol.hkct.edu.hk
helpdesk.it.hkct.edu.hk
sso.hkct.edu.hk
helpdesk.it.hkct.edu.hk
helpdesk.it.hkct.edu.hk
exmail.hkct.edu.hk
sso.hkct.edu.hk
hkct.edu.hk
ctpower.hkct.edu.hk
exmail.hkct.edu.hk
elearn.hkct.edu.hk
www.hkct.edu.hk
hkct.edu.hk
ctpower.hkct.edu.hk
enrol.hkct.edu.hk
hkct.edu.hk
ctpower.hkct.edu.hk
sso.hkct.edu.hk
exmail.hkct.edu.hk
elearn.hkct.edu.hk
*.ezproxy.hkct.edu.hk
ctpower.hkct.edu.hk
elearn.hkct.edu.hk
*.hkct.edu.hk
mediastore.hkct.edu.hk
helpdesk.it.hkct.edu.hk
*.hkct.edu.hk
elearn.hkct.edu.hk
helpdesk.it.hkct.edu.hk
ctpower.hkct.edu.hk
helpdesk.it.hkct.edu.hk
sso.hkct.edu.hk
helpdesk.it.hkct.edu.hk
www.hkct.edu.hk
enrol.hkct.edu.hk
enrol.hkct.edu.hk
exmail.hkct.edu.hk
*.hkct.edu.hk
hkct.edu.hk
exmail.hkct.edu.hk
exmail.hkct.edu.hk
helpdesk.it.hkct.edu.hk
www.hkct.edu.hk

Certificate

The complete raw certificate details for exmail.hkct.edu.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmCwDbX01W2kyVLbrpi3
ZJ3O3pKRXY4jwWeyQleutr7kLk8UPhYb7mhwzOAYJhyWiCF1uqiReYftg2D7SjYB
7zKJMVI82K5Tp0ennxI4W7y/XvSYFRLS7XngS0/SU8qdtQVFEQY7JTQvt/PHq/n3
CE98cNOAWB4+jPl+3dQfj76KAHcAAKi80arE9sSl443g2Qj8BD9XxXGg9rbjoZmn
jzcwWorJ3NQJdiKn/ldt2O8Cw6rhrsZHuHL13r97D6Gn/sJTZxQnzq8v4YVG3kpD
oNR+XBi36ttDtYXfI51TQkl5JkBL3xrHxur0XCVBt2wvqv3OP95DZp73FEMpC0yz
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21061065526478808935668535918654333864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ho Man Tin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong College of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exmail.hkct.edu.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19993330671050090915351274681461738686973152524257671233945221645310508865178053211767046056516501439820718687347473976782218937283091427853619688242140427605697139156663412034323499257720681442912914331419325062382300192417466728340326999883727360814944854457192678283364356823596242741839742000631084998252922284564927403492628151534967525515497685279097127627297073529726622070142976498067104661311836464929575288366766584424266631566368210072784662822521058573254912493615917114030359781160393056459376700824838895642823374703407208160457362558332734024360192558601367592125321114393968178992709311991596953940913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							578ac808c305f98599be7bbb66ce85bfef645b94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exmail.hkct.edu.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hkct.edu.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ctihe.edu.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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