devaprsweb01.ornl.gov

- Oak Ridge National Laboratory -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 43:9b:0e:4f:d5:17:78:cc:69:25:48:51:e0:10:38:e4 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Oak Ridge National Laboratory

Organization: Oak Ridge National Laboratory
Organization unit: GNSTD
State / Province: Tennessee
Locality: Oak Ridge
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:9b:0e:4f:d5:17:78:cc:69:25:48:51:e0:10:38:e4
Serial Number (int): 89863372009370234357733818089482500324
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 39:ec:18:43:09:04:ab:b2:7d:35:e3:7f:b5:af:f8:1a:11:06:d2:dc
Fingerprint (sha256): 02:52:0c:c5:42:be:be:c1:01:98:45:d2:b0:0a:ad:21:55:5e:94:34:2a:87:5e:80:68:a0:a2:d8:cf:aa:09:ef


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate devaprsweb01.ornl.gov

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for devaprsweb01.ornl.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name ornl.gov

(limited to 100 certificates)
5098030885765120-fe4.pantheonsite.io
internal.webmap.ornl.gov
radware.phy.ornl.gov
www.arm.gov
jenkins.ccs.ornl.gov
ccms-cdash.ornl.gov
cades.ornl.gov
Recruiting-tst-internal.ornl.gov
armweb0-stgcms.ornl.gov
5098030885765120-fe4.pantheonsite.io
5098030885765120-fe4.pantheonsite.io
itsdpro.ornl.gov
ornlsurv02.ornl.gov
radware.phy.ornl.gov
eber.ed.ornl.gov
vpnprod3.ornl.gov
fsnutown.phy.ornl.gov
its2010.ornl.gov
Recruiting-eq2.ornl.gov
LYNCPOOL01.ORNL.GOV
tech-showcase.ornl.gov
sldtransfer.ornl.gov
visitors.ornl.gov
orca.phy.ornl.gov
5664512065667072-fe2.pantheonsite.io
savitar.ornl.gov
cades.ornl.gov
www.isotopes.gov
5721718521856000-fe2.pantheonsite.io
its2010.ornl.gov
infoviz.ornl.gov
tokens.ornl.gov
sapsys-qas.ornl.gov
cyber-wb.ornl.gov
fusion-neutronics.ornl.gov
5664512065667072-fe2.pantheonsite.io
5664512065667072-fe2.pantheonsite.io
geoai.ornl.gov
cem.ornl.gov
thredds.daac.ornl.gov
devintidp.ornl.gov
5721718521856000-fe2.pantheonsite.io
devaprsweb01.ornl.gov
ftp.ornl.gov
inspirebridge.ornl.gov
web.ornl.gov
api.granite.ccs.ornl.gov
smcdatachallenge.ornl.gov
home.rrd.ornl.gov
itsassets.ornl.gov
trac.ornl.gov
cdiacservices.ornl.gov
www.isotopes.gov
itsassets.ornl.gov
saponbase.ornl.gov
itsdeployment.ornl.gov
bptechday.ornl.gov
isotopes.phy.ornl.gov
g2mobiletest.ornl.gov
udi.ornl.gov
fegtest.ornl.gov
itsassets.ornl.gov
cem.ornl.gov
swc.ornl.gov
ornlaccess.ornl.gov
ornl.gov
LYNCACCESS.ORNL.GOV
g2photosstg.ornl.gov
savitar.ornl.gov
vera.ornl.gov
thredds.daac.ornl.gov
www.olcf.ornl.gov
asc2019.ornl.gov
ready.ornl.gov
sos23.ornl.gov
LYNCPOOL01.ORNL.GOV
innovationcrossroads.ornl.gov
geoai.ornl.gov
bboxaccess.ornl.gov
5631383682678784-fe4.pantheonsite.io
na21dev2.ornl.gov
armftp.ornl.gov
5736126123868160-fe4.pantheonsite.io
web.ornl.gov
pdt.ornl.gov
prod-web4.adc.arm.gov
5713320610889728-fe3.pantheonsite.io
itsdpro.ornl.gov
healthdata.ornl.gov
web.ornl.gov
RSC.ornl.gov
faf.ornl.gov
docs.excl.ornl.gov
apps.ornl.gov
dtrack2013.ornl.gov
pdt.ornl.gov
cloud.cees.ornl.gov
excl.ornl.gov
finder.extapps.ornl.gov
5631383682678784-fe4.pantheonsite.io

Certificate

The complete raw certificate details for devaprsweb01.ornl.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89863372009370234357733818089482500324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Oak Ridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Oak Ridge National Laboratory'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'GNSTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'devaprsweb01.ornl.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 969199897961361521827418814943785758774905928356831100616000033274838070099660121442043029551140824741058194179192473026204472672142865159616725608061784391059486465218876148354255630827698104787263966299233774812405933052143381106382599874706832108909370495546627924050941380663262919118341119680173804997895779833547404819005247285122806369108422299050576660860881572772501486098886403946186856417929667133820304135199130342055285275753369735635004437023382331770769249621965314460547979659963160420468940973175775695354010333148714857930762749692553213616467637833914176974249634648212053356876508392156319373131063895189151277625263395567192550275130565516303451167928402183414504542053862706085153697458679773766042537800038661643128203339059126128267075214063215976509599319185242928383268216472513610858069234139770241469748908154012533942483703977141594659389505887444285753172399139185936281984458385350703968382257063699144758161402529366128403388617968630830759037901915769886590432618404270480519425442402851862878715937319147275821305011605499539336317930274086384559527752806881648072782112790188349104212795382234318575371676966275844438215032366218276227627560075101002099618743847713235969398648404861577754009441561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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