vida.engineering.nyu.edu

- New York University -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number 02:4f:6b:1b:f5:17:6a:02:12:1b:f5:fa:f6:06:cf:f6 was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

New York University

Organization: New York University
State / Province: New York
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:4f:6b:1b:f5:17:6a:02:12:1b:f5:fa:f6:06:cf:f6
Serial Number (int): 3070819876234195051460258325816856566
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: b2:05:66:a9:0d:be:85:8a:2b:23:5b:7d:85:75:bd:25:42:65:c5:62
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 0b:3c:d0:84:75:bb:f8:22:52:d7:52:59:8f:6d:e3:08:79:3b:03:65
Fingerprint (sha256): 00:e1:45:f6:2a:d4:f8:29:cc:78:93:65:c4:b4:f5:a2:ab:27:ae:8a:f3:81:f1:d7:40:1e:3b:b2:fc:53:b2:72

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate vida.engineering.nyu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vida.engineering.nyu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vida.engineering.nyu.edu

Other certificates including the domain name nyu.edu

(limited to 100 certificates)
nyush-nac1.shanghai.nyu.edu
*.abudhabi.nyu.edu
hosting.nyu.edu
citkce-stg.admin.tsoa.nyu.edu
rits.hosting.nyu.edu
rebekahrust.hosting.nyu.edu
ssoprod.its.nyu.edu
zora.hosting.nyu.edu
giki.hosting.nyu.edu
diploma.sps.nyu.edu
5648867420798976-fe4.pantheonsite.io
fastmri.med.nyu.edu
fcl.law.nyu.edu
mobileprint.nyu.edu
admissions.emeritus.org
cluster3.technolutions.net
pdsdev.library.nyu.edu
5676582576324608-fe3.pantheonsite.io
cluster3.technolutions.net
applicant.stern.nyu.edu
katejustement.hosting.nyu.edu
heng.hosting.nyu.edu
drkjlancaster.hosting.nyu.edu
klaporta.hosting.nyu.edu
sueannlau.hosting.nyu.edu
recreationregistration.nyu.edu
dcone.hosting.nyu.edu
administrative-app-garden.rit.nyu.edu
makerspace.engineering.nyu.edu
shanghai.hosting.nyu.edu
cairoash.hosting.nyu.edu
laurafranklin-hall.hosting.nyu.edu
ssl714081.cloudflaressl.com
tolga.hosting.nyu.edu
greenestuff.hosting.nyu.edu
tisch.nyu.edu
cb.engineering.nyu.edu
5629935204958208-fe2.pantheonsite.io
newborn.hosting.nyu.edu
dslinks.hosting.nyu.edu
holostor.hpc.nyu.edu
vida.engineering.nyu.edu
cas02pmvwi.shc.sa.nyu.edu
bennyboy.hosting.nyu.edu
drr.cfs.nyu.edu
j3.shared.global.fastly.net
affiliate-snd.albert.its.nyu.edu
webinar.online.engineering.nyu.edu
nyush.hosting.nyu.edu
marl.smusic.nyu.edu
perspective.nyu.edu
isdm.nyu.edu
sliu.hosting.nyu.edu
shibboleth.nyu.edu
kimmelonestop.nyu.edu
underrights.hosting.nyu.edu
cybersymposium.engineering.nyu.edu
vgc.poly.edu
debrajlevine.hosting.nyu.edu
banking-business-review.com
cga.hosting.nyu.edu
keywords.nyupress.org
sl5298.hosting.nyu.edu
christinexu.hosting.nyu.edu
rh.abudhabi.nyu.edu
shanghai.hosting.nyu.edu
home.nyu.edu
tmsdc02.shc.sa.nyu.edu
osiris.cyber.nyu.edu
jose.hosting.nyu.edu
katejustement.hosting.nyu.edu
violetnetwork.nyu.edu
koh.hosting.nyu.edu
whyb.hosting.nyu.edu
balletcenter.nyu.edu
eatingglobally.heatherruthlee.hosting.nyu.edu
vh-b7-te.law.nyu.edu
spanua3.hosting.nyu.edu
cluster3.technolutions.net
shanghai.hosting.nyu.edu
englishchannel.hosting.nyu.edu
textbooks.shanghai.nyu.edu
engage.its.nyu.edu
cga.hosting.nyu.edu
ais-web.stern.nyu.edu
*.stern.nyu.edu
wormtails.bio.nyu.edu
banking-business-review.com
seungguini.hosting.nyu.edu
zerobin.library.nyu.edu
laraybabrar.hosting.nyu.edu
learn.gencore.bio.nyu.edu
cluster2.technolutions.net
alicezhao.com
sofie.stern.nyu.edu
isdm.nyu.edu
fasedtech.hosting.nyu.edu
alyazia.hosting.nyu.edu
vgc.poly.edu
5629935204958208-fe2.pantheonsite.io

Certificate

The complete raw certificate details for vida.engineering.nyu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yzhAiety8AyqhuCefOI
Z6Cbpma6K5azNZpT6QH96WYnP0kub6DAmSee0ka3W7bOOODTmYtK+IhnEw/DIZwf
qKy8R61dWgZQq7gFrkmhmPHAJQJ7zdWuG6T+0LaA8Gvyx4rW3NQuxbA0nb6G8js4
v9+kSkuPM59abz8/YWLX0yhDitWXuTQ1ZouOoKF5M3e2c7i1n48POfgCeQ745Rgq
DQSIvIDGbCu/RX5HRs8Jx1LW08Azz9uNTW44dsl5vlHwHebhiHFAFQ1qLZw0tH9V
nxVuVIgIsnKY2IJZVh8fLAoSBnour44F9caSVXNfTrLRlI8EI8Ix095eC8JTdMKg
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3070819876234195051460258325816856566
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vida.engineering.nyu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27163366197408765532406592283887502300052792653110326273056941073488088954865101668722278586137280281458626516945697728147078596509024508956647581800108050224923581376059707121237819231779998419767423741516566809030506486972141192218537040586855410449338980083447750671767207974863677870542183516493832427787197344756300901663240897474780963224747997583969916676826227034487929638685437253235215712243358674469952871209936553145983829312987882767158427863454164469289729551800589019986310711432114465000557593137301459991651516035115658982691928810228821706577596000966889335705403191318071720449968424789292502655009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b20566a90dbe858a2b235b7d8575bd254265c562
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vida.engineering.nyu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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