advancing.colostate.edu

- Colorado State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 4b:3d:b0:92:30:a4:c7:19:29:15:3a:be:72:eb:b8:5f was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Colorado State University

Organization: Colorado State University
State / Province: Colorado
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:3d:b0:92:30:a4:c7:19:29:15:3a:be:72:eb:b8:5f
Serial Number (int): 100012411078695769250614185476041193567
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d6:f5:6e:e6:1c:4d:70:73:a0:56:25:8e:e0:ef:ba:8f:9b:fb:38:7f
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): b8:47:ad:7b:99:d2:3a:2e:eb:9e:67:8e:ee:91:37:f1:22:56:16:5f
Fingerprint (sha256): 01:70:3a:2e:a5:a4:fa:54:6c:b6:0a:2f:5a:22:29:59:ed:be:91:04:22:7d:bf:ca:8b:e9:8f:39:f2:36:d5:db

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate advancing.colostate.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for advancing.colostate.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advancing.colostate.edu

Other certificates including the domain name colostate.edu

(limited to 100 certificates)
webcms3.colostate.edu
dsawptest4.colostate.edu
webcms3.colostate.edu
customviewbook.colostate.edu
high-speed-video.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
cluster.technolutions.net
cnee.colostate.edu
www.csurecdashboard.colostate.edu
coloradoencyclopedia.org
connect.colostate.edu
cnee.colostate.edu
csal.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
apps.cnhp.colostate.edu
tmi.colostate.edu
cloudsat.atmos.colostate.edu
taurus.cnr.colostate.edu
www.todossantos.colostate.edu
nibbler.math.colostate.edu
biz.source.colostate.edu
aresprod19.colostate.edu
secspc.netsec.colostate.edu
advancing.colostate.edu
lawncheck.colostate.edu
police.colostate.edu
securedns1.planmygift.org
securedns1.planmygift.org
northernipm.colostate.edu
it.colostate.edu
cr-laserfiche.acns.colostate.edu
lsccms.colostate.edu
www.diversity.colostate.edu
webcom.colostate.edu
wptest.agsci.colostate.edu
cluster2.technolutions.net
speedtest.colostate.edu
wsnet.colostate.edu
bushewett.BUSINESS.COLOSTATE.EDU
warnercms.colostate.edu
mail.business.colostate.edu
secspc.netsec.colostate.edu
buselab2016gw01.busdom.colostate.edu
www.webcms2.colostate.edu
chunglab.colostate.edu
lsc.colostate.edu
vprwebdev.research.colostate.edu
atmos.colostate.edu
directaccess.chhs.colostate.edu
fsus-23.freshservice.com
filehold.research.colostate.edu
railbender.nrel.colostate.edu
gradadmissions.colostate.edu
fsus-24a.freshservice.com
san-7-s11.tlsprovisioning.exacttarget.com
teams.cvmbs.colostate.edu
coloradoencyclopedia.org
cluster.technolutions.net
vetmedbiosci.colostate.edu
ocl.colostate.edu
webcom.colostate.edu
sccoldfusion.cvmbs.colostate.edu
ramcamps.colostate.edu
commitment.colostate.edu
cluster.technolutions.net
tls.automattic.com
onishlab.colostate.edu
securedns1.planmygift.org
cluster.technolutions.net
*.agsci.colostate.edu
illiad.library.colostate.edu
ob1-p1.advance.colostate.edu
pgrcourse.colostate.edu
coursedev.math.colostate.edu
warnercms.colostate.edu
baacc.colostate.edu
atrc.colostate.edu
www.admissions.colostate.edu
engagement.colostate.edu
www.ascsu.colostate.edu
www.cmb.colostate.edu
agsci.colostate.edu
help.canvas.colostate.edu
apps.natsci.colostate.edu
dsawptest5.colostate.edu
drought-net.colostate.edu
www.admissions.colostate.edu
otp.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
agsci.colostate.edu
psm-ns-bda.colostate.edu
helpdesk.appareluae.com
ramcareertools.colostate.edu
studentcasemanagement.colostate.edu
dvmhousing.cvmbs.colostate.edu
southcampus2.cvmbs.colostate.edu
singlesites.dev.colostate.edu
intro.online.colostate.edu
monroe.cnhp2k.colostate.edu
warnercms.colostate.edu

Certificate

The complete raw certificate details for advancing.colostate.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100012411078695769250614185476041193567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'advancing.colostate.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805572138013316600111165984574506600708246728568427447815159069836316042101373816325946955247426212130197018082212702507248990736798836631855769712934639582511419813205667764934776302539559479923280091507678295006806183734269859296822669547751048583254854675665738997161663320633826650712209135323711332595256112484872821182067777042915883082906819756210315622790227968573434846337854926703935024877689108895155318115971661617344979033178378568060808677974061126260234513713513980117308548356044817294918769837292833192473826773442193443526826023478668343899234881233765818013902600953463901834793979114278947338371251103126645742325146880379732332087871467837583915349952406746766828077553502764077549877278246389294640734934280657479548206954989987274424043098314455213388347367803170179165536171851105785617522300616988864739463776068474111077611206436827911545860424163839362004176962855141930057062103478129687735512361934606691899392829970988921785100826899322472016858846130959327723253473651644758622817285575876655740799947397524529634624431660615378486472936614761885506029627591291793000947907231241824625295454112174378003388619831413371353714414112539783319976859600734496591629959815500097063734833694789871841932283549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6f56ee61c4d7073a056258ee0efba8f9bfb387f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancing.colostate.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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