HTTP/1.0 400 Bad Request
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 312
Expires: Wed, 25 Dec 2024 13:18:28 GMT
Date: Wed, 25 Dec 2024 13:18:28 GMT
Connection: close
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fd:ce:e4:76:48:fb:16:19:4a:45:fa:37:22:1a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Extended Validation Server CA
Validity
Not Before: Sep 9 00:00:00 2024 GMT
Not After : Sep 10 23:59:59 2025 GMT
Subject: jurisdictionC=US/jurisdictionST=West Virginia/businessCategory=Private Organization/serialNumber=137503, C=US, ST=New York, L=New York, O=Teachers Insurance and Annuity Association of America, CN=ais2.tiaa-cref.org
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a5:97:ee:aa:1f:d0:29:c2:96:aa:ae:c6:11:82:
d8:21:a9:9d:70:fb:32:d0:cb:d7:10:6c:df:dc:7c:
2e:7c:5b:0c:de:28:0b:a3:46:4b:95:23:ad:60:da:
6f:21:2f:c8:7d:5f:7f:4d:76:bb:18:f2:51:82:8e:
80:72:89:7e:92:38:b0:5e:a5:8b:3d:98:13:33:bd:
d7:60:5c:b8:35:20:9a:2b:62:a8:8e:ba:8b:a3:58:
66:62:e1:48:2d:19:d5:12:bf:f7:4a:c6:6d:a8:26:
f7:90:d1:85:9f:5c:9c:6e:90:48:d4:1f:69:c5:fd:
27:c0:3d:4a:23:71:27:18:18:a9:29:15:cb:49:5e:
1e:0c:b1:54:1e:47:4a:04:c7:26:16:df:26:85:d2:
4f:6a:73:25:37:c3:1f:a1:46:c6:0a:54:ae:e4:37:
5c:45:9f:26:f6:88:53:b3:c7:9d:b4:54:3f:91:3a:
ba:37:98:18:84:c4:7e:06:4d:e3:07:76:65:aa:e3:
61:e7:2c:8a:00:54:2c:b7:2e:60:f4:bf:f5:9d:ef:
9b:91:f4:04:bc:6a:9a:44:f2:89:22:e3:89:be:1d:
f6:a6:48:ae:0b:4c:8b:d1:27:02:bf:4f:23:53:ea:
44:39:22:38:d1:78:4d:7e:c3:b6:7b:d0:2d:db:7e:
1e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
3D:D3:50:A5:D6:A0:AD:EE:F3:4A:60:0A:65:D3:21:D4:F8:F8:D6:0F
X509v3 Subject Key Identifier:
C2:EE:A0:34:8B:9E:FE:CF:56:66:64:2E:0D:5C:A2:55:9D:C8:7D:C1
X509v3 Subject Alternative Name:
DNS:ais2.tiaa-cref.org, DNS:ais2at1.tiaa-cref.org, DNS:ais4.tiaa-cref.org, DNS:ais4at1.tiaa-cref.org, DNS:community.tiaa-cref.org, DNS:easauthgateway.tiaa-cref.org, DNS:easwebportal.tiaa-cref.org, DNS:esign.tiaa-cref.org, DNS:ifa.tiaa-cref.org, DNS:iwc-at.test.tiaa-cref.org, DNS:iwc.tiaa-cref.org, DNS:lbox3.tiaa-cref.org, DNS:m.tiaa-cref.org, DNS:mat.tiaa-cref.org, DNS:media.tiaa-cref.org, DNS:mobile.tiaa-cref.org, DNS:mobileat.tiaa-cref.org, DNS:mop.tiaa-cref.org, DNS:osda.tiaa-cref.org, DNS:pg.tiaa-cref.org, DNS:planfocus.tiaa-cref.org, DNS:public-community-at.test.tiaa-cref.org, DNS:public-ifa-at.test.tiaa-cref.org, DNS:public-iwc-at.test.tiaa-cref.org, DNS:public-iwc-st2.test.tiaa-cref.org, DNS:public-m-at.test.tiaa-cref.org, DNS:public-osda-at.test.tiaa-cref.org, DNS:public-planfocus-at.test.tiaa-cref.org, DNS:public-publictools-at.test.tiaa-cref.org, DNS:public-securebanking-at.test.tiaa-cref.org, DNS:public-securebanking-at.tiaa-cref.org, DNS:public-service-at.test.tiaa-cref.org, DNS:public-shared-at.test.tiaa-cref.org, DNS:public-sihttps-at.test.tiaa-cref.org, DNS:public-tclifemgroup-at.test.tiaa-cref.org, DNS:public-tclifesolutions-at.test.tiaa-cref.org, DNS:public-welis-service-at.test.tiaa-cref.org, DNS:public-www-at.retirementatwork.org, DNS:public-www-at.test.tiaa-cref.org, DNS:public-www-at.tiaa-crefinstitute.org, DNS:public-www-at.tiaadirect.com, DNS:public-www-at.tiaadirect.org, DNS:publictools.tiaa-cref.org, DNS:secure.tiaa-cref.org, DNS:secureat1.tiaa-cref.org, DNS:securebanking.tiaa-cref.org, DNS:service.tiaa-cref.org, DNS:shared.tiaa-cref.org, DNS:sihttps.tiaa-cref.org, DNS:tcconnect.tiaa-cref.org, DNS:tclifemgroup.tiaa-cref.org, DNS:tclifemgroupat.tiaa-cref.org, DNS:tclifesolutions.tiaa-cref.org, DNS:tclifesolutionsat.tiaa-cref.org, DNS:vdi.tiaa-cref.org, DNS:welis-service.tiaa-cref.org, DNS:www-ha.tiaa-cref.org, DNS:www.retirementatwork.org, DNS:www.tclifemgroup.com, DNS:www.tiaa-cref.org, DNS:www.tiaa-crefinstitute.org, DNS:www.tiaadirect.com, DNS:www.tiaadirect.org, DNS:www1.tiaa-cref.org, DNS:www1at.tiaa-cref.org, DNS:wwwat.tclifemgroup.com, DNS:wwwat.tiaa-cref.org, DNS:wwwat.tiaa-crefinstitute.org
X509v3 Certificate Policies:
Policy: 2.16.840.1.114412.2.1
Policy: 2.23.140.1.1
CPS: http://www.digicert.com/CPS
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/sha2-ev-server-g3.crl
Full Name:
URI:http://crl4.digicert.com/sha2-ev-server-g3.crl
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
Timestamp : Sep 9 13:06:32.744 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:B1:0F:35:78:6C:76:1D:3F:0F:21:E8:
7B:9F:0F:65:8E:EE:D0:03:88:D7:06:CE:7F:4A:D7:65:
7A:2C:6A:C8:97:02:21:00:B8:4E:4B:71:1A:F7:87:76:
9D:A9:1E:D3:47:0B:E4:A2:F0:97:64:6A:DB:EE:7C:07:
47:4A:CF:EC:F5:1D:6E:1B
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Sep 9 13:06:32.758 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:85:EA:4D:F2:2A:59:29:97:88:01:D3:
EB:AB:0C:62:1A:77:8B:02:17:C3:91:30:DF:60:F2:88:
38:9F:38:62:AC:02:20:6D:9E:66:70:19:F0:A7:FE:26:
7C:C9:15:D5:37:0B:46:8B:36:8C:A2:EB:58:5A:DA:E0:
C4:D7:BC:3C:41:73:4B
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
Timestamp : Sep 9 13:06:32.731 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:70:83:B0:21:A9:66:49:32:40:EF:7C:D1:
65:23:36:8D:FF:09:2F:FC:84:58:0A:1C:AF:75:9B:C9:
49:C4:63:C2:02:21:00:BA:B9:A1:43:70:7C:9A:9A:60:
8D:51:90:3A:CC:68:37:E8:3E:9B:58:90:EC:46:65:54:
79:75:E1:F2:A6:25:D1
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
16:19:cf:eb:42:9e:43:2c:d7:69:c9:dd:81:86:70:98:96:f2:
2f:fe:f5:97:bf:7a:f2:78:ab:ce:07:82:e3:c1:ed:e6:18:33:
7b:b3:5c:aa:b8:7b:83:69:30:af:38:31:b5:4f:05:76:a3:e0:
88:f4:57:e9:50:54:bf:f8:96:fd:13:d7:0f:c0:42:5e:0f:f2:
a5:0d:dd:5b:73:bd:12:6c:95:ec:e5:ae:a2:e1:4a:ef:72:1e:
c0:d5:e1:f9:5a:11:ab:25:45:2e:e4:9b:43:27:45:64:1e:b0:
75:25:e4:0b:db:c9:c6:1b:17:d9:dc:36:59:15:6f:43:7b:76:
96:9a:d3:aa:ce:e4:32:e7:e9:07:62:f6:d2:5d:ec:a8:08:15:
57:00:73:4b:92:14:73:27:37:b6:19:88:5c:55:36:b1:05:3b:
ee:52:fe:92:54:4f:41:8b:34:e9:3b:b6:05:fe:cd:6d:2d:ef:
5b:12:e8:20:b4:7d:40:c7:ff:63:50:90:45:e2:d3:ce:19:27:
5b:e5:bf:5d:89:c4:67:9c:9e:26:ce:47:ae:65:da:7f:80:28:
8b:8c:e1:b5:84:bd:b6:b6:41:43:fe:85:49:6b:c4:a6:2a:ed:
24:75:16:99:6f:06:8d:36:7e:f3:85:e8:f0:e0:ee:d9:cf:f1:
2d:84:e2:4c