usuexweb1.usuhs.edu

- Uniformed Services University of the Health Sciences -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 51:c5:a8:70:15:76:ec:66:ad:c4:0e:d5:1f:f8:94:4f was issued on by GeoTrust Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Uniformed Services University of the Health Sciences

Organization: Uniformed Services University of the Health Sciences
Organization unit: OCIO
State / Province: Maryland
Locality: Bethesda
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 51:c5:a8:70:15:76:ec:66:ad:c4:0e:d5:1f:f8:94:4f
Serial Number (int): 108693766464720116651807687887707214927
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 86:24:b1:74:4b:af:3b:11:9b:f3:2b:af:04:e4:41:07:13:fc:c9:68
Fingerprint (sha256): 0c:33:b1:a2:06:86:29:a4:cc:40:66:43:f3:1f:5c:2d:df:0c:b6:de:44:1d:e0:cd:bb:4b:6b:12:2f:a0:41:45

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate usuexweb1.usuhs.edu

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usuexweb1.usuhs.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bic2.usuhs.edu
bicapp.usuhs.edu
mdlcalendar.usuhs.edu
mdlroom.usuhs.edu
mentoring.usuhs.edu
mpo.usuhs.edu
pharmacy.usuhs.edu
usuexweb1.usuhs.edu

Other certificates including the domain name usuhs.edu

(limited to 100 certificates)
www.usuhs.edu
usuasoexweb2.usuhs.edu
www.lrc.usuhs.edu
puppetmaster.usuhs.edu
my.usuhs.edu
CUP-MC-CPC1-PUB.usuhs.edu
www.usuhs.edu
portfolio.usuhs.edu
echo-ess.usuhs.edu
usuhs-vh-03.usuhs.edu
carlosdev.usuhs.edu
er.lrc.usuhs.edu
desxi28.usuhs.edu
usuhs-vdi-03.usuhs.edu
scholar.usuhs.edu
drupal-centers.usuhs.edu
stage-fac-dev.usuhs.edu
CUCM-MC-CPC1-TFTP-01.USUHS.EDU
mneat.usuhs.edu
usuhs-vdi-01.usuhs.edu
lmsdev.usuhs.edu
desxi32.usuhs.edu
stage-sakai.usuhs.edu
news.usuhs.edu
www.usuhs.edu
eduapp1.usuhs.edu
usuimpact.usuhs.edu
usuasodevweb.usuhs.edu
stage-fac-dev.usuhs.edu
stage-redcap.usuhs.edu
ususecureauth2.usuhs.edu
caslocator.usuhs.edu
usu-awx.usuhs.edu
slides.usuhs.edu
canvas.usuhs.edu
eduapp2.usuhs.edu
usu-conn-srv-02.usuhs.edu
desxi29.usuhs.edu
usuexweb2.usuhs.edu
usuasostage.usuhs.edu
lrc2.usuhs.edu
CUCM-MC-CPC1-TFTP-01.USUHS.EDU
cas.usuhs.edu
slides.usuhs.edu
usuhs-voip-02n.usuhs.edu
content.usuhs.edu
cfapps.usuhs.edu
kcoeus.usuhs.edu
usuasoweb.usuhs.edu
servicenow.usuhs.edu
panopto.usuhs.edu
dental.usuhs.edu
im.usuhs.edu
lb.usuhs.edu
doc.lrc.usuhs.edu
usuexweb1.usuhs.edu
usuasoexweb2.usuhs.edu
usuasostage.usuhs.edu
certificates.usuhs.edu
usuasoexweb2.usuhs.edu
pathslide1.usuhs.edu
*.lrc29.usuhs.edu
usuexweb1.usuhs.edu
usuasodevweb.usuhs.edu
eduapp2.usuhs.edu
usuhs-voip-04a.usuhs.edu
www.usuhs.edu
erdev.lrc.usuhs.edu
cac.cas.usuhs.edu
ususolarwinds.usuhs.edu
mta-sts.usuhs.edu
usuhs-biz.usuhs.edu
usuasoexweb2.usuhs.edu
CER-MC-CPC1-SUB.USUHS.EDU
iwcp.usuhs.edu
*.lrc28.usuhs.edu
usuexweb1.usuhs.edu
cf2.usuhs.edu
usuaperio1.usuhs.edu
CUP-MC-CPC1-PUB.usuhs.edu
epicc.usuhs.edu
my.usuhs.edu
redcap.usuhs.edu
epicc.usuhs.edu
www.lrc.usuhs.edu
usuasoexweb1.usuhs.edu
usuhs-vh-01.usuhs.edu
stage-sakai.usuhs.edu
usuexweb2.usuhs.edu
maintenance.lrc.usuhs.edu
er.lrc.usuhs.edu
www.usuhs.edu
apps.usuhs.edu
content.usuhs.edu
usuehshpserver.usuhs.edu
stage-drupal-centers.usuhs.edu
foreman.usuhs.edu
lrc-web.usuhs.edu
ncdmph.usuhs.edu
RCS28.lrc.usuhs.edu

Certificate

The complete raw certificate details for usuexweb1.usuhs.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIW5KCSar+tRNI2MeGwH
POOe3ceXbe2ptwbNHBd+OA9mLj1DNm8DVzLLaZumg+4cgVlgembOf2bv57OGoOlf
ddmMQZmZiU6tEDAycOHCo9y9XtFKOzUdU/T/YNnC74XClEwbbW7v0scrwwGPrB1g
vqVYqJgBtmCzYO7nQPpWP6rGJHF3OOp4jXe5PqBBUgmZpx2t6lRMjYXnDbsUhScA
pO7KI2c5at9nB+qW4IKt9ieUCU+0yxlR+/2j2LHzQ0Z6eJo7lNowPgyd9IOsyqUL
SN8HaI1sC4ftMS4grSbibiUNSirZx9AKUeqozOgpvisx2mPMChO/Tf5TFmjOcN2O
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108693766464720116651807687887707214927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bethesda'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Uniformed Services University of the Health Sciences'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCIO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'usuexweb1.usuhs.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23293789515261545139613056584331106687878746065958741277245129984071699188757168990805112218688131497388704489646888339316067861888778210726843621349689249333170247597534129518095192828968445688076776937209552730340190791087715747344748205430316214450685853520147962198579690222985547028696760893316156102574562718594399492343661731544018084290181974883821007788179393841084905084414705407751857832592314484303903601455515508975359631056110704049182255116657461532743659088401464260919297842696824836358730587605489725339599459154643097000938277172525802198907096448116274879282950527859127598302812186390598162157279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bic2.usuhs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicapp.usuhs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdlcalendar.usuhs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdlroom.usuhs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentoring.usuhs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpo.usuhs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.usuhs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usuexweb1.usuhs.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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