blog.cs.brown.edu

- Brown University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 3c:e0:5d:a9:2b:a0:fb:a4:92:6f:fe:af:91:d3:36:c8 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Brown University

Organization: Brown University
State / Province: Rhode Island
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:e0:5d:a9:2b:a0:fb:a4:92:6f:fe:af:91:d3:36:c8
Serial Number (int): 80918653910561830182303074672268490440
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 6a:05:5d:6d:49:ad:ca:43:7d:a9:03:06:5a:39:27:ff:36:bf:0c:3e
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): e4:e7:22:1e:a7:3f:3e:a7:2f:0f:8b:3c:08:68:b7:f2:ea:f1:ca:f6
Fingerprint (sha256): 00:f3:e0:0d:c7:aa:2a:89:fe:17:fa:9c:00:16:e0:7d:8c:7b:d3:c9:b9:a6:82:29:a1:cd:29:eb:16:e8:64:77

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate blog.cs.brown.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.cs.brown.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.cs.brown.edu

Other certificates including the domain name brown.edu

(limited to 100 certificates)
carpepm.almonds.com
familyweekend.brown.edu
image.ma.mirashiru.dai-ichi-life.co.jp
particleastro.brown.edu
sni.cloudflaressl.com
tls.automattic.com
pampcit1.ad.brown.edu
5750683647082496-fe3.pantheonsite.io
2020.brown.edu
cluster3.technolutions.net
5656540782526464-fe4.pantheonsite.io
sni.cloudflaressl.com
blug.brown.edu
remotion.cs.brown.edu
blog.cs.brown.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mturk.cs.brown.edu
cme-learning.brown.edu
illiad.brown.edu
logiscorp.ch
cdn-test.battlefields.org
directory.cis-dev.brown.edu
vaina.club
citeak.multidevcom.uaf.edu
cluster3.technolutions.net
pdctrackcit.services.brown.edu
bannernav.cis-dev.brown.edu
josiah.brown.edu
pli2002.cs.brown.edu
qbmcssocit.ad.brown.edu
5656540782526464-fe4.pantheonsite.io
continuingeducation.brown.edu
lists.cs.brown.edu
franck.engin.brown.edu
publichealth.brown.edu
serre-lab.clps.brown.edu
chns120.courseresource.yale.edu
*.jupyter.brown.edu
crm-qa.advancement.brown.edu
systems-git.cs.brown.edu
www.genialinfo.com
proteinarium.brown.edu
africana.brown.edu
goedel.stronghold.brown.edu
5750683647082496-fe3.pantheonsite.io
webapps.cis-qas.brown.edu
mediacapture.brown.edu
reslife.brown.edu
sni.cloudflaressl.com
medicine.at.brown.edu
5750683647082496-fe3.pantheonsite.io
revproxy.brown.edu
emergency.brown.edu
frpreq.brown.edu
bejih.com
sni.cloudflaressl.com
i2s.brown.edu
docs.ccv.brown.edu
library.brown.edu
www.clarkxie.com
bgtlab.econ.brown.edu
pli2002.cs.brown.edu
med.brown.edu
www.cs.brown.edu
livestream.brown.edu
chns168.courseresource.yale.edu
rosettastone.brown.edu
web-auth.brown.edu
franck.engin.brown.edu
5644979804307456-fe3.pantheonsite.io
compbio.cs.brown.edu
test.clinical-psychology.med.brown.edu
seekdeep.brown.edu
giving.brown.edu
tramcit1.ad.brown.edu
dark.cs.brown.edu
pldi14-aec.cs.brown.edu
facgov.brown.edu
canvas.brown.edu
app.icerm.brown.edu
icfp2002.cs.brown.edu
pnesscan1cit.net.brown.edu
pfmgisappcit.ad.brown.edu
tlfb.brown.edu
club.kjzz.org
newton.math.brown.edu
pfmgiswbcit.ad.brown.edu
software.cs.brown.edu
xrootd.brux11.hep.brown.edu
neuroscience.brown.edu
dev.college.brown.edu
bejih.com
idmreg.cis-qas.brown.edu
5656540782526464-fe4.pantheonsite.io
*.cs.brown.edu
ucexpresse.uc.brown.edu
5656540782526464-fe4.pantheonsite.io
webgazer.cs.brown.edu

Certificate

The complete raw certificate details for blog.cs.brown.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80918653910561830182303074672268490440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rhode Island'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brown University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.cs.brown.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912407507922439869725866564517752678114507935718430818843504506965670832654651681091920010830130335493494230323384564734290735226428675220595920889210142949612735016664202706972796978219458754923588303622548455555218433095698394992437991438553587852958406423814733810463957399591710935130971329377784965459860936420260225876850691811195702920855025331617160064596128377763167398561830762063943822168501075930031029314067097503186330017100961962410948696872141380226688986985176668423547542432772164082556249678237296406061265190619070790212399803764629673551484129705148382392201754604647751401512584580841535145587640861691467499381081601439919599627858945309795901626901062048887243812827402890680528638860146861569705909765664170049810593294201188478510939554175446454690234541025738507175780005306669615731305137351696146822022762088581691739473529855246186884666825524341379359883399192327597120614202460796419421078801186149271156338093149716589940882204570924241088381517384576893421697776132908967924201281420684716990840772371206078367450191312230693938786707180076277804240964570058302899231691966178395554541212865369004471079383528570488324819544839653060476103608054167178278200244860034488696196615931592860794529291517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a055d6d49adca437da903065a3927ff36bf0c3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.cs.brown.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0062d4c9d51ee0512a552f60453d5bed373a3b2a19927cb98349e9f3b05201e9cdec8179add0d1a6b3aeda7bc65f81fe13c9368ae454efc622452556baf9bcb68d483db54adcff145aa5a7a985a94f40e26f8a4bbff9118017c36c4a11c774fa7172178551aec9a7fc6e074d752b8ed34905b51ff15e6d6fc378ecfee9fe51041796e8d038db3d7e93c036a4cbe08af55f796e5c8c34c6e91ecc06188bf911d415f34fabe916ea3ec460ce2fed9556784fe65bdf507f50e865642aabe1948dbc6c600274507355d7d87fb57c2965fcc74720c7ad2497b6d8aec3c67ce0a40797271e018be8ae84e024de29f0e535fdaae8150972426080008b729370232e369559