www.tpri.org

- The University of Texas Health Science Center at Houston -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number f1:d9:25:e0:2f:a8:ac:5f:ff:f8:c6:20:9b:bb:a2:c4 was issued on by Internet2.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The University of Texas Health Science Center at Houston

Organization: The University of Texas Health Science Center at Houston
Organization unit: U.T. Health (Houston) [root]
Address: 7000 Fannin, Suite 1200
Postal code: 77030
State / Province: TX
Locality: Houston
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f1:d9:25:e0:2f:a8:ac:5f:ff:f8:c6:20:9b:bb:a2:c4
Serial Number (int): 321471443613480230289444852863195652804
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3c:86:8b:41:90:e5:1b:05:67:c7:22:df:3d:90:d4:9f:a8:f3:24:5a
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): f3:4b:90:65:e9:82:11:67:e4:6d:cb:94:31:29:88:72:7b:2a:2f:a7
Fingerprint (sha256): 0b:c5:d4:df:b6:1f:81:be:4a:c2:10:80:d8:1b:7b:e2:2f:83:be:98:c5:3c:e1:6b:2c:aa:24:73:0d:c5:cc:10

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate www.tpri.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tpri.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tpri.org
tpri.org
tpri.uth.tmc.edu

Other certificates including the domain name tpri.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.tpri.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321471443613480230289444852863195652804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '77030'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7000 Fannin, Suite 1200'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Texas Health Science Center at Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'U.T. Health (Houston)  [root]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tpri.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700976972275803125090227506572152991289407450653836353856790198458910791892429764474269278471576385386065678565864362472052800572192133558969839795485193616918535166675162048025759387242580238602218041978018952944047718970686562174715744747210676456724532829553135614315432943194033031678536204219308862599742152112564339699845637446664881698494158925606381721164604680723737727477779561438516972694613299469976929506129453756214635914802786666997352718728190736236235016618706302162417161259349023768031707081757837942141662387829445520647289724671317944324633521584816757948895141108672363860449359198873210036351571106450597466297814789867877065382742861698722082969072933371895791123053125531004110127128484132614147594031677176814205563215839647411196137125894865609807406484277118916124738552480144185052802816614919968239113450441185357163464592628235554690813050586563164913458232309255496966844610672370002950458457182667409315447479320227248319230231839921221137079700493287695009680352867935385775683082459701278643864722042687767454475810006704212350326740696749604453525784437735374727199007110349228415471395980608512027690650613958318747720756321328104957956072070209723204482230536030177773771390056754721023666146299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c868b4190e51b0567c722df3d90d49fa8f3245a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tpri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpri.uth.tmc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016484ccba190000040300473045022100956dba113c6cace60d572d93fe2fd05df5cad26b72d19b01fd396c6487a23b8602207155191c155e357e316605a9b6d4378541a7e14ebc826f29bee41dd99337283f0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016484ccb7d00000040300483046022100e13d26123bad615507a0727c8e65cb2a8788bdbb8ba8b2fab097eddb6be29de4022100ede75b7100a6a0cfed22889b57e0046af09b4e2872b9e7896ed80c48e444a3f60076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016484ccb7ab000004030047304502202668f4fd4ea563f7f34c88d9d5bc885459d30c9a9dcff07b065b09708fa4c512022100e45303067681e9fff1840631fe249ce769e91aa155a6a932455580daf9a252e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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