ensemble.marshall.edu

- Marshall University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number fd:9d:59:60:1f:6e:2e:50:50:b6:e9:b0:1c:60:e9:11 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Marshall University

Organization: Marshall University
State / Province: West Virginia
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fd:9d:59:60:1f:6e:2e:50:50:b6:e9:b0:1c:60:e9:11
Serial Number (int): 337111686290459246005419751611723475217
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 71:12:25:3b:0a:c2:5a:c8:6b:f5:67:79:bb:1b:2b:39:7c:f5:12:31
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): f0:02:7c:1c:13:be:3e:4e:4d:73:77:99:dc:f9:cc:cc:b8:c6:9b:7e
Fingerprint (sha256): 0a:35:d2:b5:ba:c5:7b:af:1c:97:ea:5f:90:93:05:ab:b0:db:c2:e8:f6:bf:7a:ec:b9:93:34:a7:4f:02:a4:93

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate ensemble.marshall.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ensemble.marshall.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ensemble.marshall.edu

Other certificates including the domain name marshall.edu

(limited to 100 certificates)
gateway.marshall.edu
app.wizer-training.com
wowza.marshall.edu
app.wizer-training.com
libids.marshall.edu
app.wizer-training.com
muvpn02.marshall.edu
muataconsole.marshall.edu
ssl.smugmug.com
app.wizer-training.com
wvaquavit.marshall.edu
mds.marshall.edu
muwugpro.marshall.edu
rdtest1.marshall.edu
app.wizer-training.com
netapps.marshall.edu
muise-psn02.marshall.edu
murcapps.marshall.edu
panorama.marshall.edu
muise-temp.marshall.edu
r25ldap.marshall.edu
redcap.marshall.edu
www.marshall.edu
lyncfepool13.marshall.edu
appsanywhere.marshall.edu
lists.marshall.edu
mufi5-test.marshall.edu
lists.marshall.edu
kbox.marshall.edu
ssl.smugmug.com
ensemble.marshall.edu
muitvs05.marshall.edu
ise-eap.marshall.edu
somsp.marshall.edu
www.marshall.edu
somcitrix.marshall.edu
mulibiiidb.marshall.edu
app.wizer-training.com
somwebapps.marshall.edu
mds.marshall.edu
ssl.smugmug.com
argos.marshall.edu
webwork.marshall.edu
app.wizer-training.com
app.wizer-training.com
ise-admin.marshall.edu
libids.marshall.edu
app.wizer-training.com
somsharepoint.marshall.edu
rasgateway01.marshall.edu
ssl.smugmug.com
trainingapp.sidechannel.com
lists.marshall.edu
app.wizer-training.com
email.mg.marshall.edu
proxy-dev-wvaquavit.marshall.edu
mymu.marshall.edu
app.wizer-training.com
gems.marshall.edu
somtsgw.marshall.edu
apply.marshall.edu
*.marshall.edu
mulibiiidb.marshall.edu
app.wizer-training.com
mumobileprod.marshall.edu
mds.marshall.edu
itisvault.marshall.edu
mushc.marshall.edu
app.wizer-training.com
mds.marshall.edu
mymu.marshall.edu
parallels.marshall.edu
app.wizer-training.com
muvpn.marshall.edu
events.marshall.edu
app.yeda.club
scores.marshall.edu
app.wizer-training.com
somvpn.marshall.edu
app.wizer-training.com
mycampus02.marshall.edu
app.wizer-training.com
ise-admin.marshall.edu
munacsri.marshall.edu
mhcaco.marshall.edu
marshall.edu
mucpi.marshall.edu
mu-oment.marshall.edu
muremote.marshall.edu
selfservice.marshall.edu
idp.marshall.edu
app.wizer-training.com
libids.marshall.edu
orientation-test.marshall.edu
wowza.marshall.edu
muataconsole.marshall.edu
livewell.marshall.edu
webwork.marshall.edu
mu-oment.marshall.edu
sso.marshall.edu

Certificate

The complete raw certificate details for ensemble.marshall.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337111686290459246005419751611723475217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marshall University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ensemble.marshall.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 642620858015651323967728499398782266729724976655193632524135754853308545491863979153610270428283512217362991475349404605674992903507084900061897921293274921215925327182554949584364384440284344894721443996329469278953185985736603253250756708706871809883260561337149118363478248719898892375026392696200661001542291363380807279521186085843061358497015616246989285083250193056054506460631097332623982780812132111999195611092749985103353113492135802818675389701617246782718457417335631166844679480773109372444805628290145425211842003036022347814428484021543206140770088971657162221895230764894525988831461874409238840297157823017889189212673246648759815487889640307508369862638887518220783401495738733711381818533420482014384319816142979017471116121326574474342819065097011081829179388773611446724693241014365161629521462570772925256062284765643040729182745597346474272010099009048423653525931416758883899999687321122852388763905720906762805103995545693403121446831234181203802007812830487969503506479431163110486746823534903828454143251114871378445280987445951018974641048835127056931808102873969789523395525100259983703912048046837636696957967652092859685302143346925168635421817640992764009149135281307988959434878199081826157604290229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7112253b0ac25ac86bf56779bb1b2b397cf51231
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemble.marshall.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							016b007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000182ea77cfa70000040300483046022100a4769ece7faa77c173229f13f921eedaa7402343ad4b944c46722ab17560a398022100d28047ac2797bd5c0c353b26749bf69e5685cf7f5629c4d84f1e75a844dc558d0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000182ea77cff70000040300483046022100fb39d8ddc156b48ea8293e54e00d7e2cc1221b29115db3f6896f69c26cd421d2022100f4e5252758e4049c73739f8102a2f9dd675c37695b320a9af590fb043394f512007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000182ea77cf890000040300483046022100cb4a395a29d5e510c720f0042d57a841215e640764997292f20f1f99470460fe022100aa0cc0370c81f8bc98ef21654fbaba40a2359f9e29936867e3242fc0dc724872
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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