www.hgsc.bcm.edu

- Baylor College of Medicine -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 74:30:b6:aa:33:76:60:bd:41:8a:5f:5a:70:f8:36:2f was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Baylor College of Medicine

Organization: Baylor College of Medicine
State / Province: Texas
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 74:30:b6:aa:33:76:60:bd:41:8a:5f:5a:70:f8:36:2f
Serial Number (int): 154443382643522250597908434284451477039
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a3:af:4e:c2:dc:5c:9f:65:17:01:67:db:69:97:41:10:17:85:78:53
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): d3:d8:4a:6f:b8:2b:87:f1:1c:06:24:20:97:c9:d7:f8:34:4d:4e:b8
Fingerprint (sha256): 07:64:c0:a2:50:28:42:31:34:5f:0a:0c:ca:52:61:66:2e:47:c6:1d:a6:45:6f:ea:c8:a1:d4:ee:df:76:7a:e0

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate www.hgsc.bcm.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hgsc.bcm.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hgsc.bcm.edu
hgsc.bcm.edu

Other certificates including the domain name bcm.edu

(limited to 100 certificates)
forms.bcm.edu
sapintportal.bcm.edu
intranet-calendar.bcm.edu
semaphore-qa.bcm.edu
alphaphinetwork.com
bcmess.bcm.edu
connect.bcm.edu
webmail.hnl.bcm.edu
vpn.bcm.edu
lyncfepool1.bcm.edu
redcap.research.bcm.edu
acsconnects.org
docuware.admin.bcm.edu
password.bcm.edu
cvd.hgsc.bcm.edu
aceconnection.org
aatlconnected.com
media.bcm.edu
hgsc-hcp-aw.hgsc.bcm.edu
pwss.bcm.tmc.edu
vpn01.bcm.edu
tst-slicerdicer.clinical.bcm.edu
anscsp.research.bcm.edu
myappsdev.bcm.edu
alumniucsh.com
sigauth.bcm.edu
evault.bcm.edu
oncoredev.dldcc.bcm.edu
deku.dldcc.bcm.edu
www.bcm.edu
connect.bcm.edu
cryoemdb.bcm.edu
mychart.bcm.edu
cams.bcm.edu
pdxportal-stg.dldcc.bcm.edu
aceconnection.org
blake.bcm.edu
biobank.research.bcm.edu
www.hgsc.bcm.edu
fmog.bcm.edu
tcrbbiobank.research.bcm.edu
tls.automattic.com
aatlconnected.com
epa-safegx0-p01.ad.bcm.edu
ictr-qa.research.bcm.edu
sug-angus.hgsc.bcm.edu
careeverywhere.bcm.edu
vpn02.bcm.edu
mychart.bcm.edu
epicapps.bcm.edu
vpn01.bcm.edu
mobid.analytics.bcm.edu
claimsmanager-dev.clinical.bcm.edu
collaborate.bcm.edu
mhgretreat.research.bcm.edu
cpd.education.bcm.edu
ahlafoundationconnect.com
cas.research.bcm.edu
mobi.analytics.bcm.edu
ecw-calabrio-p01.bcm.edu
progeny-fhq-dev.dldcc.bcm.edu
tls.automattic.com
apps.bcm.edu
vpn02.bcm.edu
tls.automattic.com
tls.automattic.com
iron-ea.bcm.edu
oncoredev.dldcc.bcm.edu
hgsc-vmweb-08.hgsc.bcm.edu
ahlafoundationconnect.com
halo-esxi.lssbc.bcm.edu
careeverywhere.bcm.edu
primordial.clinical.bcm.edu
igap.research.bcm.edu
connect.bcm.edu
connect.bcm.edu
biobank.research.bcm.edu
oncore-stg.dldcc.bcm.edu
sharepoint.bcm.edu
hsweb-trn.clincal.bcm.edu
dev-slicerdicer.clinical.bcm.edu
ecl-uprint-p01.ad.bcm.edu
tls.automattic.com
mediasrc.bcm.edu
tls.automattic.com
metrics.apps.bcm.edu
fmog-qa.bcm.edu
access.fortefoundation.org
cams.bcm.edu
brain.bcm.edu
nadcdev.bcm.edu
mhgretreat.research.bcm.edu
primordial.clinical.bcm.edu
ictr-dev.research.bcm.edu
acquire2-cats-stg.research.bcm.edu
epicapps-dev.bcm.edu
myappsdev.bcm.edu
cas.research.bcm.edu
aatlconnected.com
oncore-dev.dldcc.bcm.edu

Certificate

The complete raw certificate details for www.hgsc.bcm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154443382643522250597908434284451477039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baylor College of Medicine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hgsc.bcm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745508088371925384178454053833105052287770507287444722279569191712777666712853378667590634422624851576699222291810599575750059313460828369568626506125375912403149136251483352796200539544726717093698677655155335020488574664378200699226647942718219792922923167374648891218311696713652459686007430875154947223020491785159101368567574765869054375731607018469908390285899157813185935918917625733294187960702028664039722811480726333840496141152219933643208569422433830746002283816880157531992097265246512517242804268645114990571623087637625418171407813145384252370161886587046467204240882741078271334177101867732331630964219571105098161939863790927303991199116426601267274675244432950589526960657734935765776092709482388559204517922497617524173636615231229787672506729360742791066437159628828831317906696894329460694650305137639995946682587007696506370950909430441468539410728565222137493532101908985339963165308606344782806550559064793173650759388090975902701246626564255250954630745606480722529663824981659559315935931668701574716387818841009714127129906576458417521399370425081361552753110023945243524662052154908357485953535953090759549752618122141906900136253383625001620862648543198526080659154824105804437700802993249920124194588281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3af4ec2dc5c9f65170167db6997411017857853
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hgsc.bcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgsc.bcm.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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