*.ibbr.umd.edu

- Institute for Bioscience and Biotechnology Research -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:2f:3a:b7:42:af:59:56:1e:f3:9f:8a:c1:15:82:44 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Institute for Bioscience and Biotechnology Research

Organization: Institute for Bioscience and Biotechnology Research
State / Province: MD
Locality: Rockville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:2f:3a:b7:42:af:59:56:1e:f3:9f:8a:c1:15:82:44
Serial Number (int): 2903684843069715097515518044778365508
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ef:0e:27:eb:7f:25:26:ff:0b:5e:a3:19:e2:db:cf:16:3a:84:43:1a
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 44:bf:f2:0d:65:3c:c4:ed:24:29:fc:bc:c4:63:cf:9a:27:c7:cd:85
Fingerprint (sha256): 00:b8:56:c4:92:fe:a7:bc:80:85:5a:b7:2c:f4:ca:72:4f:34:2b:2f:82:ed:bd:bd:c7:66:07:44:e8:da:60:23

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g2.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g2.crl

Check the revocation status for certificate *.ibbr.umd.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ibbr.umd.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ibbr.umd.edu
ibbr.umd.edu
portal.ibbr.umd.edu

Other certificates including the domain name umd.edu

(limited to 100 certificates)
grades.cs.umd.edu
sims.eng.it.umd.edu
sfunder1cert.net
www.see.umd.edu
www.bioscience.umd.edu
legacylamp-faculty.elb.it-prod-cots.aws.umd.edu
calce.umd.edu
test-web-lws.edu.help
kfs.umd.edu
www.recoveringdemocracyarchives.umd.edu
bsos.umd.edu
*.givegab.com
www.umdphysics.umd.edu
view.e.rhsmith.umd.edu
bfs-trans2.qa.umd.edu
oer.umd.edu
hcixdementia.umd.edu
vicarious.cs.umd.edu
user.eng.umd.edu
tin.umd.edu
www.temperamentandnarrativeslab.umd.edu
aast.umd.edu
*.rhsmith.umd.edu
me.umd.edu
universityhonors.umd.edu
lasonline.umd.edu
msmc.umd.edu
rcpsl.ece.umd.edu
ercimpaqt.umd.edu
publish.lib.umd.edu
qa.ccebh.umd.edu
akamaisan.qualtrics.com
www.aast.umd.edu
jmail.umd.edu
diversity.umd.edu
dns-vetting1j.map.fastly.net
umeg.umd.edu
nartc.fcm.arizona.edu
apphosting-tools.qa.umd.edu
*.ibbr.umd.edu
item.umd.edu
copier.umd.edu
umincentiveawards.umd.edu
infosci.umd.edu
cfar.umd.edu
5703789046661120-fe2.pantheonsite.io
dcicblog.umd.edu
balldoolinglab.umd.edu
icdldev.lib.umd.edu
experts.umd.edu
smart.bgr.umd.edu
phr-app4.umd.edu
dev.vaslavehousing.umd.edu
cgunupd1.umd.edu
ITFHR.UMD.EDU
voyager-mac.umd.edu
pm.umd.edu
*.ibbr.umd.edu
jqi-wiki.physics.umd.edu
*.proxy-ce.researchport.umd.edu
diversity.umd.edu
webmeeting-dev.umd.edu
*.givegab.com
viz.umd.edu
tls.automattic.com
sbnpsi.astro.umd.edu
evidlab.umd.edu
dev.msac.umd.edu
checkio.reslife.qa.umd.edu
www.modarres.umd.edu
openknowledge.umd.edu
dev.studentaffairs.umd.edu
sophie-test.umd.edu
*.givegab.com
5639026912526336-fe4.pantheonsite.io
wireless.umd.edu
www.tt.umd.edu
marylandrha.umd.edu
icecube.umd.edu
congo.umd.edu
maestro2-public.it-dev-cots.aws.umd.edu
tls.automattic.com
5639026912526336-fe4.pantheonsite.io
www.arhu.umd.edu
sophie-test.nflc.umd.edu
*.givegab.com
qa.studentconduct.umd.edu
oitap254v.umd.edu
dev.education.umd.edu
fastbreakers.umd.edu
gened.umd.edu
*.cbcb.umd.edu
agnr.umd.edu
eit.umd.edu
ctg-ws.umd.edu
apm1.qa.umd.edu
nxterra.ucop.edu
float.umd.edu
prosamservices.dev.umd.edu
mim-dev.umd.edu

Certificate

The complete raw certificate details for *.ibbr.umd.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/NqpxJu9kuXD/EjUoef
xdADNqXRTmI+R1eRl4Atx9aNciyvoJF0rHlAf5V0jrDYETWSl7T73iBXqdAbjNXJ
9pK9MJuEgrQPsa2p/P4spXiPM0FqiirIuqI+/gcknTT+9p91vFQRz7qZ6RPpTHhd
bKi9n3O8JWNMSB+NaGw1tlOVn3S1niLRPcX+seeRDdkObClUMp0pk9XZPmqTKYUy
ZHiu36q+eeXbs7w4rml9l70vg1EH+97/nIGrmQENDWzi3BpIF+Xz08v7Ma5uWccQ
2N3FUMjWZ6mT/96rulqBG04KBwZISKMJic35aZp0A5zkJBp6ZR/K7EQxT8g/A5U2
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2903684843069715097515518044778365508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rockville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Institute for Bioscience and Biotechnology Research'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ibbr.umd.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25241455893231193482937279419462296867069553552600783435473006537126570326822512328881078729955681774248319297015405490038909667878380138563859173924053067993704892545433361162036592078413777908960217088963889973709773831082559580364781901254274395606876521144203729375402330032137629896330766007161924485825049100354160178773965447886979172093241387605445241432406244884452418212521735275089911387070598662387590848246128355664053403944078761859059975597112360007465096542581691986225081067873491004741807131204963205267038548991538391465631550233709906670605183292808484681345299260795556303767143066808217670858441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef0e27eb7f2526ff0b5ea319e2dbcf163a84431a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibbr.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibbr.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ibbr.umd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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