prism.nacse.org

- Oregon State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 1c:c1:45:74:d5:9a:52:c9:70:2d:71:4c:16:c6:09:26 was issued on by Internet2.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oregon State University

Organization: Oregon State University
Organization unit: NACSE
State / Province: Oregon
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:c1:45:74:d5:9a:52:c9:70:2d:71:4c:16:c6:09:26
Serial Number (int): 38221905918511242411632944826450053414
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: ea:db:d0:f0:8e:82:52:f5:39:71:24:16:e5:ed:fd:fc:2d:b8:a5:de
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 27:8c:65:51:9a:36:53:23:2e:55:c0:33:c8:4b:74:03:dc:6f:1a:da
Fingerprint (sha256): 0a:a6:cc:7a:24:04:9a:59:2c:39:5d:66:85:4e:e6:c3:0f:8a:46:e9:80:11:d0:a5:0c:12:06:da:e1:a6:9f:c4

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate prism.nacse.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prism.nacse.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prism.nacse.org
ftp.prism.nacse.org
ftp.prism.oregonstate.edu
prism.oregonstate.edu
prismweb1.nacse.org
www.prism.oregonstate.edu

Other certificates including the domain name nacse.org

(limited to 100 certificates)
www.nacse.org
www.nacse.org
awwi.nacse.org
rma.nacse.org
prism.nacse.org
pancake.nacse.org
svndev.nacse.org
awwic.nacse.org
rattusdev.nacse.org
tile7.nacse.org
awwic.nacse.org
util.nacse.org
rma.nacse.org
awwic.nacse.org
cocorahs.nacse.org
rma.nacse.org
util.nacse.org
webmail.nacse.org
internal.nacse.org
awwi.nacse.org
www.nacse.org
www.nacse.org
awwic.nacse.org
www.nacse.org
pgadmin.nacse.org
tile7.nacse.org
rattusdev.nacse.org
tsunamirepository.nacse.org
syndev.nacse.org
webmail2.nacse.org
awwi.nacse.org
www.nacse.org
tile7.nacse.org
tsunamirepository.nacse.org
pgadmin.nacse.org
internal.nacse.org
www.nacse.org
rattus.nacse.org
rma.nacse.org
prism.nacse.org
util.nacse.org
svndev.nacse.org
rattusdev.nacse.org
util.nacse.org
syndev.nacse.org
www.nacse.org
www.nacse.org
www.nacse.org
rattusdev.nacse.org
cocorahs.nacse.org
util.nacse.org

Certificate

The complete raw certificate details for prism.nacse.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdkEu+Xjw7erPmP0FIq6
NaYcraOVDpVDY4WsLQfFD0qCKnjBLHXLf+poz08LtqACVRLyF96vrAI7IAg+ufWI
dDJ14yFtIUOB4QnqjyYevdrAoKGo0G28c+9L5n0isDAaDW00C9tbHLg7IKSeWtav
BB2idvAquKbNywEIuvibvSaGzZVU2Mdf2D4flblmXadg9vnw87GwBtZDY+og3IIa
5r3OOHeLo0tPsL0cirh1WHiAQmYrbCvrAllHp5oA97C7oJxFBK5YKgR3F5WdwAyZ
EDKQbKm3uf8yHB+vjcoho5mZnfaMMNhGhqXqaJl5J+5Lxsd5ixAvq9/WteNDfDFV
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38221905918511242411632944826450053414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NACSE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prism.nacse.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23966055445571388998828803511994499020257011870589900783077214654057873545609597391879234185881896973746007980300977464917814889492003036868344882875761650149549718780678064699395632432813810290492607831940575755818918280147898610019554290279372644568621790320161672024990263557173687705269927333085256665939263604795867376864760201387501147492688424478227732400501112147757440849595161284484405227567163756501685204583261185893712723440406635281709777901619584163995128972738825892858309573314798585402312751108635351348349567073281189616981944046756511867894413503226759839223725749663694677267573940456830482339159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eadbd0f08e8252f539712416e5edfdfc2db8a5de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (139 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prism.nacse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.prism.nacse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.prism.oregonstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prism.oregonstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismweb1.nacse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prism.oregonstate.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00596fb471df75a5213ffa8b179b925dc2e405c4434c944292bbbb70ca56743a2da4059e6917b9c72f524cd64186309bdf09749afa77ef737ffa61c9b5ffb0986eb7fe398ecee124c13d15f2e91e7fcce1d40ce474b9edb140cee46f681745288adaf7ab500a1a97472dbfe04956f19249a986941957a553b29a1d5508e18fccad2df659c5c47be88c2392870fc9b30c1ba8e0a1543b2ce91f2e140bd0e964cafd58885828cb8983ba690ce9c7775e20236628b8032e753a7caedb59e39cd473bc484c987cd2b97c10aed27f4949b89896a7a54e019cb4c6d757ab0a7b1d16d83f586aeee22b2bcaba3a54c644fa6f789d8e3106bc3afc8b0114a0d927647d9517