rss.ccs.miami.edu

- University of Miami -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number 20:3d:85:79:e6:c9:ae:0a:1f:a3:b0:b5:68:6e:73:eb was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

University of Miami

Organization: University of Miami
State / Province: Florida
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 20:3d:85:79:e6:c9:ae:0a:1f:a3:b0:b5:68:6e:73:eb
Serial Number (int): 42854733191998250543580646464038007787
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f7:b3:ba:c5:a1:d4:bd:97:7f:c8:7a:05:81:75:03:6c:80:2d:0b:b9
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 16:a0:1f:e8:50:bd:49:04:12:c4:30:e8:ed:21:73:74:ce:da:b2:4b
Fingerprint (sha256): 07:3a:2e:af:e5:46:60:b1:72:50:14:ca:cb:85:0d:9c:02:bf:7e:89:f7:fd:d1:08:82:cf:91:70:c6:5d:26:f5

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate rss.ccs.miami.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rss.ccs.miami.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rss.ccs.miami.edu

Other certificates including the domain name miami.edu

(limited to 100 certificates)
welcome3.staging.miami.edu
genomics.med.miami.edu
myuhealthchart.com
enet.miami.edu
frostonline.miami.edu
canelink.miami.edu
projectconf.miami.edu
joo.coe.miami.edu
apply.miami.edu
amploadvance.com
cacti.tel.miami.edu
blog2.miami.edu
umvadds.miami.edu
enet.miami.edu
welcome.miami.edu
uconnectlabs.com
testuchart.med.miami.edu
m.canelinktst.miami.edu
welcome.miami.edu
com.miami.edu
umeeweb1d.cgcent.miami.edu
tptp.cs.miami.edu
redcap.med.miami.edu
viacomp.miami.edu
*.it.miami.edu
*.fcdslmsdemo.med.miami.edu
welcome.staging.miami.edu
www.miami.edu
devices.miami.edu
oitest.miami.edu
uh-emr-intlbprd.med.miami.edu
fcdsnew.med.miami.edu
anthurium.miami.edu
meddc09.ad.med.miami.edu
umculture.miami.edu
welcome3.miami.edu
asb.as.miami.edu
netauth.miami.edu
careers.med.miami.edu
umchat.miami.edu
frostonline.miami.edu
www.sa.miami.edu
hemba.mbs.miami.edu
welcome3.dev.miami.edu
gw2.vpn.miami.edu
uh05maesdbsp00.cgcent.miami.edu
uhemrprxlb1t.med.miami.edu
fcdsfw.med.miami.edu
lawapps.law.miami.edu
viacomp.miami.edu
oceanlab3.rsmas.miami.edu
dev1.itlabs.miami.edu
webmail.bus.miami.edu
sbarms.bus.miami.edu
uconnectlabs.com
uhclintapp1p.cgcent.miami.edu
tls.automattic.com
canelink.miami.edu
canelink.miami.edu
uh05bsobappt00.cgcent.miami.edu
*.library.miami.edu
web.offcampuspartners.com
uconnectlabs.com
scccsolr.cgcent.miami.edu
clinicalapps.med.miami.edu
welcome3.staging.miami.edu
teststacks.library.miami.edu
welcome3.miami.edu
webmail.law.miami.edu
tls.automattic.com
fcdsmoodle.med.miami.edu
bootcamp.miami.edu
tls.automattic.com
n001.offcampuspartners.com
internal-canelink.miami.edu
canelinktst.miami.edu
ever-brighter.miami.edu
mycanes.miami.edu
m.canelinkpst.miami.edu
uhemrbcwb1t.cgcent.miami.edu
crmdev.miami.edu
velostraining.med.miami.edu
globalemba.mbs.miami.edu
myuhealthchart.com
healthyu.med.miami.edu
*.courses.miami.edu
amploadvance.com
www.sarc.miami.edu
uh05cbdldbst00.cgcent.miami.edu
rss.ccs.miami.edu
*.miami.edu
wss.law.miami.edu
welcome.miami.edu
clairvia.med.miami.edu
www.globalacademy.miami.edu
coedev.miami.edu
mcsl.med.miami.edu
magec.med.miami.edu
uhemrprovapp1p.cgcent.miami.edu
coll.ubiquitypress.com

Certificate

The complete raw certificate details for rss.ccs.miami.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42854733191998250543580646464038007787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Miami'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rss.ccs.miami.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749275001957816367895206155796570739952886145953928678096518797453389946286213237660447015220303311632061050017733287820659774222160319106876441058110541644955635864274341854841215934274727617996962953542255907356543885962469414322581907151605736871715126645671600191398034338101888474631155495483444449462805802931182281884311944538812386142769860497012161801874291361742613391174521181964317760316085930404028709931609238482478310240290168889612326718991730397489967457667661521166042106844489315648037101934397706216257912472016372177578406174048234243929523763131254467977046965928024836781625503400752702341705965084075948675387412184160924250294885413308893996422172754033450852242599668085930916998837700061689866169697458659032887109179226447546288534259793116139795092327574682040834969305779030019674830055764860069286399565016991264965549415768365411909003397873650729052819753525860580314266808274875915243077897855233605421410234700254450266816410767884939439491294013565193389781492571069761690681042716757455929438872460452297741934661352415567005158621816691802723833769733583795669738123121882218095951898567153510895353840248237477248828522948004261285715115551057868818058423070191811768806635951964670913968504919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7b3bac5a1d4bd977fc87a058175036c802d0bb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.ccs.miami.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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