calv-wac.med.usc.edu

- University of Southern California -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 17:41:0b:bd:c6:d0:6e:60:00:00:00:00:50:e5:8c:d4 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Southern California

Organization: University of Southern California
State / Province: California
Locality: Alhambra
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 17:41:0b:bd:c6:d0:6e:60:00:00:00:00:50:e5:8c:d4
Serial Number (int): 30909981341016193983283226461711207636
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 42:4c:7b:fa:03:ec:b9:dd:5f:f3:86:90:dd:93:45:36:e0:52:51:80
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 63:b5:29:4e:fb:6a:8d:9b:91:a4:24:7d:ab:dd:a9:5e:d3:73:f9:0c
Fingerprint (sha256): 00:60:5f:53:6a:98:33:37:16:59:a3:6e:16:63:37:3b:51:02:06:e3:09:15:1d:0f:53:cd:6f:43:ef:c4:f6:dc

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate calv-wac.med.usc.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for calv-wac.med.usc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

calv-wac.med.usc.edu
www.calv-wac.med.usc.edu

Other certificates including the domain name usc.edu

(limited to 100 certificates)
magazine.viterbi.usc.edu
join.chla.usc.edu
myeloidcancercures.usc.edu
br-ad.usc.edu
5684453372329984-fe2.pantheonsite.io
platformsh.map.fastly.net
arr.usc.edu
moodlerooms.com
publichealthsciences.usc.edu
5755553334689792-fe2.pantheonsite.io
us.prod.campusgroups.com
teamcity.sca.usc.edu
gradweb01.provost.usc.edu
*.usc.edu
incapsula.com
hscnews.usc.edu
5682747733442560-fe3.pantheonsite.io
vhi-ndt.usc.edu
astronautics.usc.edu
lawcf.usc.edu
keck.usc.edu
calv-wac.med.usc.edu
libcal.usc.edu
financesup-ren.ps.chla.usc.edu
it.uahs.arizona.edu
incapsula.com
prod.6.slot.cdn.salesforce-communities.com
ucdc.edu
utilities.loni.usc.edu
us.prod.campusgroups.com
sympa-app1.usc.edu
nartc.fcm.arizona.edu
faculty.usc.edu
race.usc.edu
5670405876482048-fe3.pantheonsite.io
5689127638925312-fe4.pantheonsite.io
www.cs.usc.edu
trojantime.usc.edu
moodlerooms.com
5749563331706880-fe1.pantheonsite.io
ihlab.hsc.usc.edu
eucalyptus.usc.edu
icaros.usc.edu
5686536431468544-fe1.pantheonsite.io
create.usc.edu
uasvis.usc.edu
med-reset.usc.edu
esa2019.usc.edu
roski.usc.edu
kueskistatus.mambu.com
mist.usc.edu
lawlsfp.med.usc.edu
admission.usc.edu
blackboardopenlms.com
oem-ws.usc.edu
test.eis.uw.edu
prod.18.slot.cdn.salesforce-communities.com
robotics.usc.edu
direct1.dts.usc.edu
tls.automattic.com
pmredcap.usc.edu
libanswers.usc.edu
rossieronline.usc.edu
cmail.cntv.usc.edu
provosthr.usc.edu
5689127638925312-fe4.pantheonsite.io
it.aramex.support
scehsclab.usc.edu
SOTART.MUSE.USC.EDU
www.design-engineering.princeton.edu
mylaw.usc.edu
prod.18.slot.cdn.salesforce-communities.com
calv-dsccntweb.med.usc.edu
utilities.loni.usc.edu
primarycare.usc.edu
ame.usc.edu
5684453372329984-fe2.pantheonsite.io
pscdpm.usc.edu
mymedweb.usc.edu
mphonline.usc.edu
nxterra.ucop.edu
rossier100.usc.edu
*.rossieronline.usc.edu
amifast700.aminet.usc.edu
cps.usc.edu
CHLAEXPYEDGE1.chla.usc.edu
incapsula.com
empoweredtech.usc.edu
www.uschotel.usc.edu
uasfin.usc.edu
dornsife.usc.edu
scalefunder.net
inklab.usc.edu
span.usc.edu
tls.automattic.com
facultypositions-test.usc.edu
*.usc.edu
libcal.usc.edu
www.hcii.cs.cmu.edu
ppd8.sppd.usc.edu

Certificate

The complete raw certificate details for calv-wac.med.usc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eP+tj/jQPSED2Kh/ceU
DsE7Y6mVtHNyTmpjRRBLxulMGHmUuTOw6yjjjV0Bb50lcAGFSh4OgqN+6QkYVFzn
q5iIZJaf0o6wFOANKKGgLJgHHqZ/ow1WxuuFyP5Giu0wKpkTRxX98xa0AGEt9kg5
Ud0JoMB5ugX3SuRnTzlKsyjygm3xHvbnnFRO74dCUg8bqHNtsNjZjc6bLO8K1eOO
XnH69+ZPehgR/+2VKLbzVH/kmZulLqiYTIHzYJkNaIqSdLi7VHFcVz5aksI0FWeH
i8MfZzTx71UpDdwageE+CrI89sNcQDEtvbRHwmBoUfeLH6H7vlQ1BgcEwbaTXk8j
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30909981341016193983283226461711207636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-30 17:21:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-29 17:51:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alhambra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Southern California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'calv-wac.med.usc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28516047126552905753322591520917895020910752774061522422807136382177740030216995039762357624735142281362613097140101488341581644721794002026133905691874505001407067997850708344562467086836470801453059514073981188308595755526939129434044801803229655813179621132818337675034361912549907842154289165730025059176672161675046749629889133938844154182518372492075404687733212616770283468809046775483546266771243572662038082830005039900665484634370790912415787703162803729330666123524531883606669967906677387100229187095967003435490009659217576270377058893726515238317414799192862250130271054281522939774666528832073006785339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calv-wac.med.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calv-wac.med.usc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							424c7bfa03ecb9dd5ff38690dd934536e0525180
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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