chi-tools.uc.edu

- University of Cincinnati -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number d7:27:f4:55:54:6f:ee:87:6c:25:f6:74:ba:1b:b9:68 was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Cincinnati

Organization: University of Cincinnati
State / Province: Ohio
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): d7:27:f4:55:54:6f:ee:87:6c:25:f6:74:ba:1b:b9:68
Serial Number (int): 285991474339708933684179834146721085800
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 63:aa:47:4e:05:47:7f:1d:3b:c1:08:a9:ea:06:67:90:24:19:4b:49
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 2d:c0:ba:67:5e:b8:e1:ad:56:a4:6e:34:da:7c:d0:a9:c8:59:2f:c1
Fingerprint (sha256): 02:eb:78:dc:df:1e:af:f3:98:df:bb:ec:73:63:2a:be:75:78:16:58:34:0e:8e:88:47:9c:df:cb:f7:67:75:07

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate chi-tools.uc.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chi-tools.uc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chi-tools.uc.edu

Other certificates including the domain name uc.edu

(limited to 100 certificates)
hpb-uccx-pub.uc.edu
*.cech.uc.edu
crimeinformation.cech.uc.edu
listserv.uc.edu
cluster3.technolutions.net
cluster3.technolutions.net
uaa.uc.edu
sfunder8cert.net
hpb-expe-01.uc.edu
i2b2.uc.edu
sip.uc.edu
igw.catalyst.uc.edu
amcc.uc.edu
cluster3.technolutions.net
secure.daap.uc.edu
ehs.uc.edu
hpb-cer-01-ms.uc.edu
ucii.ceas.uc.edu
excap1prd03w.ad.uc.edu
snd-imp-sub-01.uc.edu
www.wise.uc.edu
engage3.campuslabs.com
chi-tools.uc.edu
hpb-uccm-sub-01.uc.edu
admissions.catalyst.uc.edu
listserv.uc.edu
medicineonline2.uc.edu
cancercenter.uc.edu
cluster3.technolutions.net
shoplindner.uc.edu
blog.nursing.uc.edu
fammed2.uc.edu
web.offcampuspartners.com
artsci.uc.edu
donateblood.uc.edu
info.cech.uc.edu
on.uc.edu
aitl-sharepoint.uc.edu
coeustest.uc.edu
hoxqms.hox.uc.edu
ahcweb.uc.edu
n001.offcampuspartners.com
law.uc.edu
behavioranalysis.uc.edu
cluster3.technolutions.net
ucdirectory.uc.edu
multisite.uc.edu
on.uc.edu
ipittr.uc.edu
classics.uc.edu
streaming6.uc.edu
apps.uc.edu
pharmacy.uc.edu
uaa.uc.edu
cluster3.technolutions.net
hpb-expc-01.uc.edu
cme.uc.edu
ucradauthmsb.ad.uc.edu
usertest.webcentral.uc.edu
online.uc.edu
apps-qa.uc.edu
*.cech.uc.edu
*.cech.uc.edu
grad.catalyst.uc.edu
wusap1prd01w.ad.uc.edu
sfunder10cert.net
*.onestop.uc.edu
cluster3.technolutions.net
sfunder10cert.net
classics.uc.edu
rms.uc.edu
*.cech.uc.edu
ucfilespace.uc.edu
sites.libraries.uc.edu
online.uc.edu
fs.uc.edu
on.uc.edu
myhealth.uc.edu
ucradauthhpb.ad.uc.edu
cir.uc.edu
eecs.ceas.uc.edu
sfunder16cert.net
ucitsupport.uc.edu
jobs.uc.edu
ccpd.uc.edu
ixpress-server2.uc.edu
webdev.eecs.uc.edu
hpb-uccm-pub-ms.uc.edu
ahcweb.uc.edu
*.cech.uc.edu
*.ucflex.uc.edu
ccmadmissions.uc.edu
aponline.uc.edu
lawblogs.uc.edu
cgndlp-cms.uc.edu
uclid.uc.edu
airwatch.uc.edu
*.cech.uc.edu
use.cech.uc.edu
web.offcampuspartners.com

Certificate

The complete raw certificate details for chi-tools.uc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEnpj2tcfKNC6bTtfWN7
MY0CUK1QdSJHxaVz+Pz7FeO0Ux0VZLMirhbsN5++1ZgYBlfYjx20nNfmlXhUnDaf
ozjs3nRGEMukA56ryDV6eHoVE4VmZC2OAGsOsASePjJS9HTDLP623Q0Kj/L/w5yH
y6h2zTHqjvQi1EP1C1Qt+LjRd5Lcfw/3Vm/H55TCr/g82BCoJ6gQKRsUE1UVaKlb
w2d6GYG0GWDiD9oz81uRBHELRwa6Da3vQ5gsLjbav8QN6JnzolcIP4GeelL2K9Lk
7y5FXA4OeCx54jjfJlGcdJgiGKBjZr2SYtUIPy4s3xIcqbzokI13ASgLimi0L/YY
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285991474339708933684179834146721085800
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Cincinnati'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chi-tools.uc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23769248869187181072411932248963700847908006593684947484226694219027236992518135991219999394198268163515684972340874713107292178172189372183595455741952822890921548347709418364827303669299981492063990345600044055053970617995065794872751697898381135870644061879181969886730815392354345722607749915320248963702719419028910524481821372118274524672275320249428608853161806042712616216296991738212595859004619407891956005632666767049822424151652399310996285913161318923680764203573727860064753113215673914260988397260565523371283696569055610872646735526999991595730194639687109275878832683649198001970611180769172631460093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63aa474e05477f1d3bc108a9ea06679024194b49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chi-tools.uc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0032c0b5d43afae737f31b44c70106a5a71865eb42ab49c718377c3719b78277b2f7f33c24d3c749eb3f67ee20356adeda3e79a6c54d6f47394dfb9eb16a8b0c600651ff89199f90b184ae0e556271310885e24953ba8b71571753945b7b273a44b736f554dac8695c8d52b2590bb3aee288bffe8b33f52d9ecb9c7bfae4b0be760cbceb2df08748caba62e8656bfdf8197904ebb40df1edccccc81e562e0657dd8829e9bfc7edba9d3dc01a6492d9988b025cb9db1a123713141b413f21927cb882b88d383de3b87fdaae1fa9552002817f18518a3e7bbf18191db58dfdfaf285b3f0d33c0aed2801bc880ce271c1ad4fe7e70a7209f8f65ba571afaf33fb0db2