agsci.colostate.edu

- Colorado State University -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number 34:91:c3:06:39:1a:57:a8:fe:17:e6:04:b9:3d:f9:a0 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Colorado State University

Organization: Colorado State University
State / Province: Colorado
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 34:91:c3:06:39:1a:57:a8:fe:17:e6:04:b9:3d:f9:a0
Serial Number (int): 69876694388217354152826603413832595872
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 08:ac:21:b8:f8:5d:cd:49:1b:04:07:71:da:0d:43:75:0c:29:f2:5e
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 53:c7:07:48:2b:e6:a2:39:41:7b:3e:7b:27:66:bf:e0:8c:a9:82:60
Fingerprint (sha256): 04:cd:63:88:7d:c8:69:ba:8d:4f:87:55:58:5a:a9:92:17:10:34:d6:13:e7:89:de:3e:8d:c4:31:d7:2e:3f:57

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate agsci.colostate.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agsci.colostate.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agsci.colostate.edu
aes.colostate.edu

Other certificates including the domain name colostate.edu

(limited to 100 certificates)
webcms3.colostate.edu
dsawptest4.colostate.edu
webcms3.colostate.edu
customviewbook.colostate.edu
high-speed-video.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
cluster.technolutions.net
cnee.colostate.edu
www.csurecdashboard.colostate.edu
coloradoencyclopedia.org
connect.colostate.edu
cnee.colostate.edu
csal.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
apps.cnhp.colostate.edu
tmi.colostate.edu
cloudsat.atmos.colostate.edu
taurus.cnr.colostate.edu
www.todossantos.colostate.edu
nibbler.math.colostate.edu
biz.source.colostate.edu
aresprod19.colostate.edu
secspc.netsec.colostate.edu
advancing.colostate.edu
lawncheck.colostate.edu
police.colostate.edu
securedns1.planmygift.org
securedns1.planmygift.org
northernipm.colostate.edu
it.colostate.edu
cr-laserfiche.acns.colostate.edu
lsccms.colostate.edu
www.diversity.colostate.edu
webcom.colostate.edu
wptest.agsci.colostate.edu
cluster2.technolutions.net
speedtest.colostate.edu
wsnet.colostate.edu
bushewett.BUSINESS.COLOSTATE.EDU
warnercms.colostate.edu
mail.business.colostate.edu
secspc.netsec.colostate.edu
buselab2016gw01.busdom.colostate.edu
www.webcms2.colostate.edu
chunglab.colostate.edu
lsc.colostate.edu
vprwebdev.research.colostate.edu
atmos.colostate.edu
directaccess.chhs.colostate.edu
fsus-23.freshservice.com
filehold.research.colostate.edu
railbender.nrel.colostate.edu
gradadmissions.colostate.edu
fsus-24a.freshservice.com
san-7-s11.tlsprovisioning.exacttarget.com
teams.cvmbs.colostate.edu
coloradoencyclopedia.org
cluster.technolutions.net
vetmedbiosci.colostate.edu
ocl.colostate.edu
webcom.colostate.edu
sccoldfusion.cvmbs.colostate.edu
ramcamps.colostate.edu
commitment.colostate.edu
cluster.technolutions.net
tls.automattic.com
onishlab.colostate.edu
securedns1.planmygift.org
cluster.technolutions.net
*.agsci.colostate.edu
illiad.library.colostate.edu
ob1-p1.advance.colostate.edu
pgrcourse.colostate.edu
coursedev.math.colostate.edu
warnercms.colostate.edu
baacc.colostate.edu
atrc.colostate.edu
www.admissions.colostate.edu
engagement.colostate.edu
www.ascsu.colostate.edu
www.cmb.colostate.edu
agsci.colostate.edu
help.canvas.colostate.edu
apps.natsci.colostate.edu
dsawptest5.colostate.edu
drought-net.colostate.edu
www.admissions.colostate.edu
otp.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
agsci.colostate.edu
psm-ns-bda.colostate.edu
helpdesk.appareluae.com
ramcareertools.colostate.edu
studentcasemanagement.colostate.edu
dvmhousing.cvmbs.colostate.edu
southcampus2.cvmbs.colostate.edu
singlesites.dev.colostate.edu
intro.online.colostate.edu
monroe.cnhp2k.colostate.edu
warnercms.colostate.edu

Certificate

The complete raw certificate details for agsci.colostate.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHlNmPfpxuxMla1LWyQW
uj/S1olpYmrm7NqSFFQjv465hZiyxRiE4HEi529BnrQPlsbsuk0iVc/IWVvvx4VR
EaMkSKLSgh5deFKW4040vaRSzbpdgdWA+nia34On4gs9s0IWW8r7Vx0zdwcuDFul
wPdIV3fixMR5UWV2VZ+9uWQrUqD/6hFKjtvFN+gXIunXuoip9zINkML0NUSM5u/p
/kt/XgKRPI0FN+b9yBE0W61AGbXag6YtPA9B23U/M/NR3tFhwG023pizD/9HYoSn
78t9nAu2As2T+faHFnS9JHp0Bs+kWv5ynZgBeZEmR7pq4URBKmMzx75Efno+vPoe
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69876694388217354152826603413832595872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agsci.colostate.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18743085930564533262050142412613834143255217821696392696624800759134183046625649387169820653674081607673761246443242948906192649126338769805243576996365995197448294279512229049069548531088004897915682204211332938415786253650010462691055916662273291937053855331797126673975470037197537755412580322061601611404185935943097067708131327048345570851546222126111316432789088188962054627377538317073803386181612719412832329451402106937203657574873205462511495626007418681160264455444278782950181587539671570690982593881828635274251218767137389637613780698735488014892296131074968574163829426201793655774092723160779041939199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08ac21b8f85dcd491b040771da0d43750c29f25e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agsci.colostate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.colostate.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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