wwwapp.bumc.bu.edu

- TRUSTEES OF BOSTON UNIVERSITY -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 59:1a:ca:2d:98:01:27:48:49:4b:1c:1c:c6:16:0d:d0 was issued on by Internet2.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TRUSTEES OF BOSTON UNIVERSITY

Organization: TRUSTEES OF BOSTON UNIVERSITY
State / Province: Massachusetts
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 59:1a:ca:2d:98:01:27:48:49:4b:1c:1c:c6:16:0d:d0
Serial Number (int): 118440392002229784910505266520270441936
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c5:09:7e:19:ee:95:fb:31:6c:83:e4:51:89:19:98:b1:a3:3b:d0:38
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 64:c6:f5:aa:70:db:0b:55:6f:65:f8:7f:10:13:6f:3f:df:37:c7:e1
Fingerprint (sha256): 02:d0:95:d3:e6:8b:f8:b3:4d:da:e4:a7:95:35:32:dc:62:d5:2b:04:04:e7:25:9b:8a:a3:78:fb:26:bb:e6:f1

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate wwwapp.bumc.bu.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwwapp.bumc.bu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwwapp.bumc.bu.edu
web01.bumc.bu.edu
web02.bumc.bu.edu

Other certificates including the domain name bu.edu

(limited to 100 certificates)
smgserv1.bu.edu
us.prod.campusgroups.com
patientconnect.bu.edu
questromworld.bu.edu
myprintweb.bu.edu
casit-wiki.bu.edu
teklaser.bu.edu
cme.bu.edu
ec700.bu.edu
algorithmics.bu.edu
uis-eta.bu.edu
us.prod.campusgroups.com
genomics9.bu.edu
peptimap.bu.edu
cmld.bu.edu
inspir.bu.edu
amploadvance.com
san-7-s11.tlsprovisioning.exacttarget.com
ist-rims-prod.bu.edu
bubhub.bumc.bu.edu
curriculum-courseleaf.bu.edu
uconnectlabs.com
peptimap.bu.edu
adfs.bu.edu
devapplyemssp.bumc.bu.edu
genealogyonline.bu.edu
uconnectlabs.com
facdev.bumc.bu.edu
ssl714054.cloudflaressl.com
amploadvance.com
agnionline.bu.edu
exec-courses.bu.edu
cpr-archive.bu.edu
ec700.bu.edu
segrelab.bu.edu
scalefunder.net
cytreg.bu.edu
laundry-web-test1.bu.edu
genealogyonline.bu.edu
ist-shib-san2.bu.edu
bupid.bumc.bu.edu
cogrhythms.bu.edu
us.prod.campusgroups.com
test-support.bu.edu
wwwapp.bumc.bu.edu
www.shape.bu.edu
cpr.bu.edu
neidl-cmms.bu.edu
support.bu.edu
san-7-s11.tlsprovisioning.exacttarget.com
met-vs204.bu.edu
bioed.bu.edu
adfs.bu.edu
test-support.bu.edu
crem.bu.edu
disco.bu.edu
shape.bu.edu
financialplanningonline.bu.edu
bupid.bumc.bu.edu
uconnectlabs.com
agnionline.bu.edu
ftdyn.bu.edu
cytreg.bu.edu
cpr.bu.edu
disco.bu.edu
uconnectlabs.com
cpr-archive.bu.edu
boylston.bu.edu
givingday.bu.edu
illiad.bu.edu
mycv-test.bu.edu
open.bu.edu
fincomp.bu.edu
web.offcampuspartners.com
uconnectlabs.com
mypa-application.bumc.bu.edu
linklogin-syst.bu.edu
hospitality.bu.edu
webapi.bu.edu
ec521.bu.edu
kuali-research-qa.bu.edu
combeyond.bu.edu
wwwru.bumc.bu.edu
geddes-wiki.bu.edu
ist-filemaker.bu.edu
hospitality.bu.edu
us.prod.campusgroups.com
www.cpr.bu.edu
san-7-s11.tlsprovisioning.exacttarget.com
ist-fms-pr1.bu.edu
n001.offcampuspartners.com
casapps.bu.edu
study.bu.edu
shape.bu.edu
mendelsun.bu.edu
ist-ob-unity.bu.edu
ist-wsus04.bu.edu
myfitrec.bu.edu
casadvtrac.bu.edu
outandally.bumc.bu.edu

Certificate

The complete raw certificate details for wwwapp.bumc.bu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLsoGnY0WCxRUxstMOzg
58ZrZX79i4PN2Ky2Q5H+yqqJrbu9cbn+u9kG2c23BBeddIAKCmGKNQ22vJbdPBko
Udm6yid2kM/dTJQtgqB6aoObaYDOE8wS2wA+lC9UxaXbAOUqDseFGb+3aPr+Y33V
4DzN1ISUi/oKPGUvqDaONQjupegL6Qo0Ip7rzBLeXt0g6PFMQBtsz7M/Xwzc4My9
MmTKGGDkZ8Dqu/eyFhXr2LOnoc3389aRxlqsh32XbALpkLYia5cxDzbEREnm8QPW
i7hu0C8RNdU0f9hCfYl2Oq/P2PcfCkeT6lS9TPLzr5j1myWssAMvW+QrAq46gE0R
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118440392002229784910505266520270441936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TRUSTEES OF BOSTON UNIVERSITY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwwapp.bumc.bu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25339951378897488940124464952068987169669163969603157310529256246656971813968911753790308619723087576940822682431325171315962013481194906920333555928113048917152565824515921342770200606199516872323709569570772518341394327942788971637453006373650140978492930155692833068177520691763285902967453782484019177404918435556229662250399082141028354950032603036554897741028416796436662858164368186377808746081600257360580061974642672122193376858374987511177267912640082686243427984916257177750662007589677350779570616993469543499011885269214225506387026509337241306104152123852113904490322158104168196058829507327049547452897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5097e19ee95fb316c83e451891998b1a33bd038
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapp.bumc.bu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web01.bumc.bu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web02.bumc.bu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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