i2s.cis-qas.brown.edu

- Brown University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 2a:e7:9c:ef:a3:e2:3b:b6:dd:47:10:21:21:93:a7:ee was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Brown University

Organization: Brown University
State / Province: Rhode Island
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 2a:e7:9c:ef:a3:e2:3b:b6:dd:47:10:21:21:93:a7:ee
Serial Number (int): 57030179439436578242900055672069793774
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ed:5e:36:41:bb:66:39:80:4e:c4:40:ce:ce:4a:be:22:c9:c1:de:46
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): ef:34:68:57:54:c7:d0:f6:12:25:33:c8:ab:47:7b:dd:63:c5:4a:58
Fingerprint (sha256): 05:5c:4c:63:6c:64:43:fb:f2:4c:c6:5b:93:98:46:c3:e0:f2:b3:cd:51:85:bb:da:47:2d:af:c1:71:f3:e0:75

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate i2s.cis-qas.brown.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for i2s.cis-qas.brown.edu

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

i2s.cis-qas.brown.edu

Other certificates including the domain name brown.edu

(limited to 100 certificates)
carpepm.almonds.com
familyweekend.brown.edu
image.ma.mirashiru.dai-ichi-life.co.jp
particleastro.brown.edu
sni.cloudflaressl.com
tls.automattic.com
pampcit1.ad.brown.edu
5750683647082496-fe3.pantheonsite.io
2020.brown.edu
cluster3.technolutions.net
5656540782526464-fe4.pantheonsite.io
sni.cloudflaressl.com
blug.brown.edu
remotion.cs.brown.edu
blog.cs.brown.edu
sni.cloudflaressl.com
rvis.clps.brown.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
mturk.cs.brown.edu
cme-learning.brown.edu
illiad.brown.edu
logiscorp.ch
cdn-test.battlefields.org
directory.cis-dev.brown.edu
vaina.club
citeak.multidevcom.uaf.edu
cluster3.technolutions.net
pdctrackcit.services.brown.edu
bannernav.cis-dev.brown.edu
josiah.brown.edu
pli2002.cs.brown.edu
qbmcssocit.ad.brown.edu
5656540782526464-fe4.pantheonsite.io
continuingeducation.brown.edu
lists.cs.brown.edu
franck.engin.brown.edu
publichealth.brown.edu
serre-lab.clps.brown.edu
chns120.courseresource.yale.edu
*.jupyter.brown.edu
crm-qa.advancement.brown.edu
systems-git.cs.brown.edu
www.genialinfo.com
proteinarium.brown.edu
africana.brown.edu
goedel.stronghold.brown.edu
5750683647082496-fe3.pantheonsite.io
webapps.cis-qas.brown.edu
mediacapture.brown.edu
reslife.brown.edu
sni.cloudflaressl.com
medicine.at.brown.edu
5750683647082496-fe3.pantheonsite.io
animal-care.brown.edu
revproxy.brown.edu
emergency.brown.edu
frpreq.brown.edu
bejih.com
sni.cloudflaressl.com
i2s.brown.edu
docs.ccv.brown.edu
library.brown.edu
www.clarkxie.com
bgtlab.econ.brown.edu
pli2002.cs.brown.edu
med.brown.edu
www.cs.brown.edu
livestream.brown.edu
chns168.courseresource.yale.edu
i2s.cis-qas.brown.edu
rosettastone.brown.edu
web-auth.brown.edu
franck.engin.brown.edu
5644979804307456-fe3.pantheonsite.io
compbio.cs.brown.edu
test.clinical-psychology.med.brown.edu
seekdeep.brown.edu
giving.brown.edu
tramcit1.ad.brown.edu
dark.cs.brown.edu
pldi14-aec.cs.brown.edu
facgov.brown.edu
canvas.brown.edu
app.icerm.brown.edu
icfp2002.cs.brown.edu
pnesscan1cit.net.brown.edu
pfmgisappcit.ad.brown.edu
tlfb.brown.edu
club.kjzz.org
newton.math.brown.edu
pfmgiswbcit.ad.brown.edu
software.cs.brown.edu
xrootd.brux11.hep.brown.edu
neuroscience.brown.edu
dev.college.brown.edu
bejih.com
idmreg.cis-qas.brown.edu
5656540782526464-fe4.pantheonsite.io
*.cs.brown.edu

Certificate

The complete raw certificate details for i2s.cis-qas.brown.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 57030179439436578242900055672069793774
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rhode Island'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brown University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'i2s.cis-qas.brown.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4371556634307402057209972350172429980227956512836271978195730844912659857069943723733535205746387009391970445529816200526373995659374623092742513721710354029636144830078885250645735363481191463519050698418491566463275291652003046748594005097483644458113872203100209765379243619658857909177857673371184416942115471853663822485783382901966434394343609911589229579928400176058733153606805647132337067100112349607934711284698996810058083285678380053386380841594072064049079264824909473353685559117445807322051071252497116092768891808877863733144746881567670803417373637011545805102692723209831264350542883013539504487874272465235479392651277130801476047765262716548460336255786993103915390395205305430937736585109398117696214783141113681060801076593757535877370125800687188955111909604414330371203958463764788977455513834068282778069185749382925773222877307224420570834585219742700867295590924975508370437990095421936194953594763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed5e3641bb6639804ec440cece4abe22c9c1de46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i2s.cis-qas.brown.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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