www.afcbt.pitt.edu

- University of Pittsburgh -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number be:3f:3c:58:93:07:d9:89:23:3f:6f:ee:c0:b4:fa:a0 was issued on by Internet2.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Pittsburgh

Organization: University of Pittsburgh
State / Province: Pennsylvania
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): be:3f:3c:58:93:07:d9:89:23:3f:6f:ee:c0:b4:fa:a0
Serial Number (int): 252881657863380016555553527893023062688
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 15:fd:41:be:5a:18:a1:74:88:b9:0a:4d:05:ed:fd:c7:00:2e:fc:7c
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 50:5c:f1:20:ae:cf:53:ff:ca:7b:8d:80:09:75:1b:71:56:93:de:d2
Fingerprint (sha256): 01:01:62:e4:b9:74:fd:cb:b9:91:3a:6a:e6:0e:e9:fd:e4:f4:ba:1b:b5:b6:f3:78:c7:b9:45:65:52:46:d3:93

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate www.afcbt.pitt.edu

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.afcbt.pitt.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.afcbt.pitt.edu
af-cbt.org
afcbt.org
afcbt.pitt.edu
pre.afcbt.pitt.edu
pre2.afcbt.pitt.edu
www.af-cbt.org
www.afcbt.org

Other certificates including the domain name pitt.edu

(limited to 100 certificates)
statuspage.io
apistatus.pitneybowes.com
online.orientation.pitt.edu
www.kidneycenter.pitt.edu
www.wiser.pitt.edu
my.pulmonarytrials.pitt.edu
www.ctmhr.pitt.edu
www.chronicle.pitt.edu
pitt-dr-vcweb.cssd.pitt.edu
statuspage.io
www.diabetesprevention.pitt.edu
statuspage.io
aro.pitt.edu
services.rods.pitt.edu
statuspage.io
coi.hs.pitt.edu
cutislaxa.hgen.pitt.edu
www.medstudentaffairs.pitt.edu
www.cwscholars.blog.pitt.edu
my.education.pitt.edu
ewi-vip-01.cssd.pitt.edu
www.scholarlyproject.medschool.pitt.edu
go.innovation.pitt.edu
pjephl.law.pitt.edu
jmla.pitt.edu
telerehab.pitt.edu
tincture.pharmacy.pitt.edu
valet.haa.pitt.edu
www.games4socialimpact.pitt.edu
www.pts.pitt.edu
www.phdl.pitt.edu
omed.pitt.edu
www.collision.pitt.edu
www.upgservices.pitt.edu
www.afcbt.pitt.edu
clip.pharmacy.pitt.edu
eval.medschool.pitt.edu
fsc-bbm-fe01qa.fis.pitt.edu
www.roc.pitt.edu
www.iise.pitt.edu
navigator.medschool.pitt.edu
rms-pgaw-01.cssd.pitt.edu
5673649784750080-fe1.pantheonsite.io
*.tt.pitt.edu
dev-itbill.pitt.edu
www.rusfilm.pitt.edu
www.totalrewards.pitt.edu
statuspage.io
stage.fm.pitt.edu
www.pss.pitt.edu
ssoe-sp13-01.engr.pitt.edu
ewi-zweb-19.cssd.pitt.edu
ledger.pitt.edu
securedns1.planmygift.org
passport.pitt.edu
securedns1.planmygift.org
scherlock.lrdc.pitt.edu
www.aspire.pitt.edu
shrsft6029himb.shrs.pitt.edu
www.ucisportfolios.pitt.edu
anthro-age.pitt.edu
durrantlab.bio.pitt.edu
www.collision.pitt.edu
scalefunder.net
overdrive.library.pitt.edu
katz-sepm.univ.pitt.edu
www.healthyhomelaboratory.pitt.edu
ppr.pitt.edu
www.gso.cs.pitt.edu
www.law.pitt.edu
rd-r9-26-cons-1.net.pitt.edu
www.ois.pitt.edu
www.ncbrr.pitt.edu
www.connect.pitt.edu
stage.lamp.pitt.edu
www.alumnionline.pitt.edu
moira.pitt.edu
passport.pitt.edu
oam.pitt.edu
www.exhibit.library.pitt.edu
data.act.pitt.edu
www.cba.pitt.edu
stage-pittdc-01.univad.stage.pitt.edu
www.publichealth.pitt.edu
www.osp.pitt.edu
contacts.katz.pitt.edu
50.shrs.pitt.edu
chassis.hsrdc.pitt.edu
www.japanstudies.pitt.edu
www.students.pharmacy.pitt.edu
5673649784750080-fe1.pantheonsite.io
www.hopeteam.pitt.edu
www.pediatrics.pitt.edu
www.medfaculty.pitt.edu
statuspage.io
statuspage.io
www.medadmissions.pitt.edu
www.vmi.pitt.edu
www.cmh.pitt.edu
rms-sjaw-01.cssd.pitt.edu

Certificate

The complete raw certificate details for www.afcbt.pitt.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrp2icUBKOtAa0OQWdNT
6VXnW0damXENovZcvwfSKbnMTP3rOF3bhHXPTZyMKHBkVhg1D8Pe+zZGyo598zZq
QMYI1MTZlZlMCr5WiU94QzUnI0SxgeabcRpvGLw90FsydwpsyBIoaNMbXaBEUdx1
cfIT+/QZx+d6EuNF1rv3z0CiDC3TI5Ix63wsbayJ9c7dyKASyE0mgsNxNTU/KSz0
JtfzkZ2SWMApzvvdKQoZ2doh+3P1SQIPVs7PcTzxZds/10etjZ1UBh5NUi5k59Bi
2p1BJkNGN0yJZI0ISDAFPqTmIpZcdY73rCXQwBG87TJps5dfD80Nt2cQZknjEXkr
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 252881657863380016555553527893023062688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.afcbt.pitt.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25592085954980183003281097315852213632519897841384520502199513503878208618981570072545149656196770232820242329048265357935974722485270378055313534284279206348639962931162746984754502332444328070774577442983899006776379021766863669301117785648356900827329473754360927567972271042365142542860218881404494362914014962144733206532257570060959850230363163568632627957919239662400000068000022605739082037138450690787814025615682282920692530737278719413102483253733998827869788336025372888874754072081265397288088186604274988006941477668219584045527423305431394194159717516510806570281602489460425228821957014578226257275809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15fd41be5a18a17488b90a4d05edfdc7002efc7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afcbt.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af-cbt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afcbt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afcbt.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre.afcbt.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre2.afcbt.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.af-cbt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afcbt.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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