www.gnrp.pitt.edu

- University of Pittsburgh -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number d6:dd:d6:6e:78:be:85:c0:ef:db:c8:27:cc:56:81:30 was issued on by Internet2.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

University of Pittsburgh

Organization: University of Pittsburgh
State / Province: Pennsylvania
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): d6:dd:d6:6e:78:be:85:c0:ef:db:c8:27:cc:56:81:30
Serial Number (int): 285606637891829780451956710263798268208
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9d:4c:4c:66:77:c3:70:1b:8f:83:72:c6:47:e9:12:66:a9:a9:ae:9b
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 16:f8:07:f9:60:7e:17:b4:bf:52:44:74:29:0b:ca:33:c2:d8:f3:99
Fingerprint (sha256): 00:49:df:39:f7:5b:ab:bc:b4:79:40:9f:19:0c:a4:e5:6f:bc:09:bd:5a:44:f1:b2:85:27:49:4c:13:36:d4:6e

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate www.gnrp.pitt.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gnrp.pitt.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gnrp.pitt.edu
gnrp.pitt.edu
pre.gnrp.pitt.edu

Other certificates including the domain name pitt.edu

(limited to 100 certificates)
statuspage.io
apistatus.pitneybowes.com
online.orientation.pitt.edu
www.kidneycenter.pitt.edu
www.wiser.pitt.edu
supporttest.hs.pitt.edu
my.pulmonarytrials.pitt.edu
www.ctmhr.pitt.edu
www.gnrp.pitt.edu
www.chronicle.pitt.edu
pitt-dr-vcweb.cssd.pitt.edu
statuspage.io
www.diabetesprevention.pitt.edu
statuspage.io
aro.pitt.edu
services.rods.pitt.edu
statuspage.io
coi.hs.pitt.edu
cutislaxa.hgen.pitt.edu
www.medstudentaffairs.pitt.edu
www.cwscholars.blog.pitt.edu
my.education.pitt.edu
ewi-vip-01.cssd.pitt.edu
www.scholarlyproject.medschool.pitt.edu
go.innovation.pitt.edu
pjephl.law.pitt.edu
jmla.pitt.edu
telerehab.pitt.edu
tincture.pharmacy.pitt.edu
valet.haa.pitt.edu
www.games4socialimpact.pitt.edu
www.pts.pitt.edu
www.phdl.pitt.edu
omed.pitt.edu
www.collision.pitt.edu
www.upgservices.pitt.edu
www.afcbt.pitt.edu
clip.pharmacy.pitt.edu
eval.medschool.pitt.edu
fsc-bbm-fe01qa.fis.pitt.edu
www.roc.pitt.edu
ewi-zweb-21.cssd.pitt.edu
faq.pharmacy.pitt.edu
www.iise.pitt.edu
navigator.medschool.pitt.edu
rms-pgaw-01.cssd.pitt.edu
5673649784750080-fe1.pantheonsite.io
*.tt.pitt.edu
dev-itbill.pitt.edu
ledger.pitt.edu
cbordweb.upj.pitt.edu
www.rusfilm.pitt.edu
www.totalrewards.pitt.edu
statuspage.io
stage.fm.pitt.edu
www.pss.pitt.edu
ssoe-sp13-01.engr.pitt.edu
ewi-zweb-19.cssd.pitt.edu
ledger.pitt.edu
securedns1.planmygift.org
passport.pitt.edu
securedns1.planmygift.org
scherlock.lrdc.pitt.edu
www.aspire.pitt.edu
shrsft6029himb.shrs.pitt.edu
www.ucisportfolios.pitt.edu
anthro-age.pitt.edu
durrantlab.bio.pitt.edu
www.collision.pitt.edu
scalefunder.net
overdrive.library.pitt.edu
katz-sepm.univ.pitt.edu
www.healthyhomelaboratory.pitt.edu
ppr.pitt.edu
www.gso.cs.pitt.edu
www.law.pitt.edu
rd-r9-26-cons-1.net.pitt.edu
www.ois.pitt.edu
www.ncbrr.pitt.edu
www.connect.pitt.edu
stage.lamp.pitt.edu
www.alumnionline.pitt.edu
moira.pitt.edu
passport.pitt.edu
oam.pitt.edu
www.exhibit.library.pitt.edu
data.act.pitt.edu
www.cba.pitt.edu
stage-pittdc-01.univad.stage.pitt.edu
www.publichealth.pitt.edu
www.osp.pitt.edu
contacts.katz.pitt.edu
50.shrs.pitt.edu
chassis.hsrdc.pitt.edu
www.japanstudies.pitt.edu
www.students.pharmacy.pitt.edu
5673649784750080-fe1.pantheonsite.io
www.hopeteam.pitt.edu
www.pediatrics.pitt.edu
www.medfaculty.pitt.edu

Certificate

The complete raw certificate details for www.gnrp.pitt.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTLJcJf9JEzz2VQqVh0O
I6D/fiqrwVGknWRzFPQfmaI2qSDaFq65vNnWGbuVagDK7VtGZdmDDD2Ods/z8ADI
6G2W2s6FHQxTjsIm5kJEPtPaOEiM9COX3r4Q9xCNF6h4E7Dqcj+riigUTS2s8jnk
U+wOBxSihHuIDjOaG+C9fn5szh0qAe2e+ceYnm6FlsHzNka1KGLT6v2YPCsCrxve
qR7bH4wKoFwoA9W89GvC3lv5ARc+ErFacVmsBmO3R5cNmEtKr/RQlOmEZFXRJjgW
ya4YJVZ3ueWmQcgcUpW+4nYtn+siv6xZUxh8Ve20yDW8yeR15GwalKAtAcvuvUn/
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285606637891829780451956710263798268208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gnrp.pitt.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23379130359835494808073605922428343456818567528708725845900029289829479661339043000460164548853998837802788106433585695275698411781168710841503521298561330975580688139518698467514412174741891852307884538079747326723796858137232568413862078469791676210953986627250582500052531630334515362839575410721561058126759150799645622699504227459670176179986778317966809616832607026217680253149766728137217086993298552470728090492988786013980432465321198633515603135594927094505171754208940974462923782542203337020743894884402916356358423103738079439842444054544409589615463519367040602025131749000565955532744274391682205220783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d4c4c6677c3701b8f8372c647e91266a9a9ae9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gnrp.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnrp.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre.gnrp.pitt.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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