avsgallery.sfa.uconn.edu

- University of Connecticut -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number 46:d6:a7:8c:1c:97:34:77:94:b5:a2:3b:cf:a5:1a:eb was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

University of Connecticut

Organization: University of Connecticut
State / Province: Connecticut
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 46:d6:a7:8c:1c:97:34:77:94:b5:a2:3b:cf:a5:1a:eb
Serial Number (int): 94160509495865501884434856910025726699
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 5c:fc:54:2b:ee:f6:73:81:09:29:05:82:28:e7:c2:c1:d5:03:25:61
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): fb:a6:35:88:ea:dd:76:c8:d2:40:c4:76:a6:0b:6e:a7:22:aa:e3:43
Fingerprint (sha256): 01:5e:c5:5c:be:2b:01:12:49:a5:4b:39:27:92:45:b7:8c:76:a3:8c:0b:b1:ff:3d:80:25:58:20:a3:62:7e:ff

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate avsgallery.sfa.uconn.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avsgallery.sfa.uconn.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avsgallery.sfa.uconn.edu

Other certificates including the domain name uconn.edu

(limited to 100 certificates)
draft.cooley.eeb.uconn.edu
poeticjourneys.uconn.edu
my.uconn.edu
wpm.ccmp.eu
horizon.uconn.edu
ucapp.education.uconn.edu
huskywow.uconn.edu
optin.google.uconn.edu
mindandbrain.uconn.edu
transpo.uconn.edu
uconnbound.uconn.edu
isss.uconn.edu
lieberman.uconn.edu
ipm.uconn.edu
ctgeoalliance.uconn.edu
cider.uconn.edu
nagios.sa.uconn.edu
pmba.business.uconn.edu
www.indiebound.org
www.today.uconn.edu
anywhere.uconn.edu
openshift-cluster.dev-its.uconn.edu
schoolpsych.education.uconn.edu
transferconnections.uconn.edu
www.mccp.uconn.edu
hclleap-prod1.its.uconn.edu
bookfair.uconn.edu
ee-reu.engr.uconn.edu
rt.sa.uconn.edu
ppdasprod.foundation.uconn.edu
cyberlab.engr.uconn.edu
*.education.uconn.edu
math.uconn.edu
admissions.uconn.edu
hesa.uconn.edu
cshd.dev.studentadmin.uconn.edu
cace.lab.uconn.edu
draft.dmd2010.uconn.edu
uconnectlabs.com
travel.uconn.edu
www.genoleadership.uconn.edu
cicadas.uconn.edu
msbdcr2.ad.uconn.edu
draft.siavash-samei.grad.uconn.edu
avsgallery.sfa.uconn.edu
biotech.uconn.edu
fozzie.sa.uconn.edu
lisicos.uconn.edu
draft.biosignal.uconn.edu
cas-arm-0.its.uconn.edu
thor.law.uconn.edu
temp.ccc.engr.uconn.edu
uconnectlabs.com
sfac.uconn.edu
mccp.uconn.edu
www.csserl.uconn.edu
www.dsabusinessservices.uconn.edu
sc1.engr.uconn.edu
judaicstudies.uconn.edu
thumbor.core.uconn.edu
openshift-cluster.dev-its.uconn.edu
www.maylab.uconn.edu
temp.refine.uconn.edu
view-test.vpc.uconn.edu
paincertificate.uconn.edu
beijing.nursing.uconn.edu
exchange.uconn.edu
sfunder5cert.net
its.cooldude.uconn.edu
draft.orientation.averypoint.uconn.edu
www.indiebound.org
git.dmd.uconn.edu
beamentor.uconn.edu
support.clas.uconn.edu
techsupport.uconn.edu
gearup.uconn.edu
www.indiebound.com
neaas2014conference.uconn.edu
selfservice.uits.uconn.edu
www.dnp.nursing.uconn.edu
ugradresearch.uconn.edu
www.publichealth.uconn.edu
plogo.uconn.edu
prod1.cas.uconn.edu
emergency.hartford.uconn.edu
www.gradcatalog.uconn.edu
www.ccc.clas.uconn.edu
cameras.uconn.edu
hrtestweb.psoft.uconn.edu
www.innovation.uconn.edu
illustration-request.core.uconn.edu
fw-avpt.net.uconn.edu
draft.altos.uconn.edu
www.dmd2010.uconn.edu
draft.phuong-nguyen.grad.uconn.edu
cein.nursing.uconn.edu
pcs.uconn.edu
temp.foote.geography.uconn.edu
www.minorprotection.uconn.edu
archives.lib.uconn.edu

Certificate

The complete raw certificate details for avsgallery.sfa.uconn.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8q9sMWdrgdpUQzIZEVpL
k766iu77h4mm1N5AKCgITR/M6lWrdzR6ME3XnG4VlcUlQTTx78LLhcTX/5pc+ZR3
8Krzg1ZEwpaShzSzBzZbQfZHTcIEp9WCjClmfFQhzpgq9gqr22jGIJn6J3WGI7t5
j11spap0cW1/1EzNwzaQE2Zw6U7gbU7cU4iTGM8X+CTSdPOx8eG6TI9KjinSyxts
YWsMFZZHL2z35ezPrRg1g5Rx3CnP4J6wzQnuvPIxWs2uK5H/2ULCWQaKoPfOcsF0
IyW4MIxmL+iIppG6DalR5MFICJx8bbudRI6XIamHf95SYYGHYfrLDhcfnJegUsLA
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 94160509495865501884434856910025726699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avsgallery.sfa.uconn.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30636173924122434521998114785350028708560526766889361705484860877331037106816097677960136035769135245438788444276356923323420350846503892818551697524881542224887110668292936809275082984172527766758667763786550233306239997287103812123086671152126703690888063145175034460943395321807283921465587062002654688063012237073465010840850972672902137837005757655874385616342396158290823983863478283981958786065026861092918748758532421740130807918970153921907081112710896096861549173112861581847293402575691759606947103769197578004866314751189875435634041660599164179529289730511826324270621108947406740163201635950400446316653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cfc542beef673810929058228e7c2c1d5032561
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avsgallery.sfa.uconn.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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