riipen.charlotte.edu

- University of North Carolina at Charlotte -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 3f:73:4e:40:fe:6c:00:96:6e:5b:1d:3c:0f:aa:f7:55 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of North Carolina at Charlotte

Organization: University of North Carolina at Charlotte
State / Province: North Carolina
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:73:4e:40:fe:6c:00:96:6e:5b:1d:3c:0f:aa:f7:55
Serial Number (int): 84340065050472450171535145922181396309
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 07:95:f7:27:af:5e:41:2d:d7:a9:ac:ca:8a:52:ec:5b:78:4a:c7:cf
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 9d:c4:fe:33:2a:f4:1b:90:57:65:49:67:33:f1:ec:22:ca:a7:7e:22
Fingerprint (sha256): 0d:3f:8f:f6:2b:e0:f0:61:87:3e:e4:24:0f:04:2e:76:01:e8:73:1d:4f:f5:40:f9:73:88:ec:e6:80:7d:31:c5

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate riipen.charlotte.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for riipen.charlotte.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

riipen.charlotte.edu
riipen.uncc.edu

Other certificates including the domain name charlotte.edu

(limited to 100 certificates)
ltm-cws-vip.charlotte.edu
ns-appapi-vip.test.uncc.edu
ctxteststore.uncc.edu
gsuite.uncc.edu
webauthqa.uncc.edu
spaces.uncc.edu
webauthqa.uncc.edu
gradapp.charlotte.edu
dspcwapp01.its.uncc.edu
power.sjsu.edu
networklb.charlotte.edu
hireaniner.test.charlotte.edu
coop.charlotte.edu
san-12-s10.tlsprovisioning.exacttarget.com
ns-node-gw-vip.test.uncc.edu
ns-appdev-test-vip.uncc.edu
impactacademy.charlotte.edu
xeadm.uncc.edu
hrlprmsapp03.uncc.edu
xeadm-upg.test.uncc.edu
suaritwebprod.uncc.edu
cci-fungene.uncc.edu
dstcwapp01.uncc.edu
localdocs.charlotte.edu
devdc02.dev.charlotte.edu
openoptions.charlotte.edu
ssb.dev.uncc.edu
idmclt02dc01.idmusr02.charlotte.edu
pages.charlotte.edu
future49er.charlotte.edu
hrltcliqweb03.its.uncc.edu
stage-careerdata.charlotte.edu
catalog.uncc.edu
testssomanager.uncc.edu
riipen.charlotte.edu
my.test.uncc.edu
coop.charlotte.edu
library.charlotte.edu
compass.test.charlotte.edu
irptableau02.uncc.edu
ehsa.charlotte.edu
xeadm.dev.uncc.edu
testimaging.uncc.edu
cciplaravelapp01.charlotte.edu
dspcwapp01.uncc.edu
careemonitor.uncc.edu
ltm-ninernet-vip.uncc.edu
riipen.charlotte.edu
spaces.uncc.edu
midpoint.dev.charlotte.edu
liisp.charlotte.edu
fin-test.charlotte.edu
suaritwebprod.uncc.edu
guides.library.charlotte.edu
remotesupport.charlotte.edu
docusignintegration.uncc.edu
stuart.charlotte.edu
san-12-s10.tlsprovisioning.exacttarget.com
advisingstaff.charlotte.edu
publicjobs.charlotte.edu
career.charlotte.edu
uncc-casper.uncc.edu
hrltrmsapp03.uncc.edu
journals.charlotte.edu
xeadm.uncc.edu
degreeworks.uncc.edu
journals-dev.charlotte.edu
saitwebprod02.uncc.edu
ns-treqssupg-vip.uncc.edu
bas.charlotte.edu
my.dev.charlotte.edu
bancanvasapi.uncc.edu
cci-bioinfo.uncc.edu
catalog.charlotte.edu
hireaniner.charlotte.edu
library.charlotte.edu
coaahelp.charlotte.edu
ehsa.charlotte.edu
engrapps.uncc.edu
ecom.charlotte.edu
career.test.charlotte.edu
dgwtbe-upg.charlotte.edu
xeadm-upg.test.uncc.edu
stuart.charlotte.edu
careerapps.test.charlotte.edu
dgwtbe-test.charlotte.edu
careetapp02.test.charlotte.edu
n003.offcampuspartners.com
n003.offcampuspartners.com
ninerengage.uncc.edu
fm311.test.charlotte.edu
saittfslweb01.charlotte.edu
saitwebprod02.uncc.edu
saitpfslweb01.charlotte.edu
itsphgaapp01.uncc.edu
cybergis.charlotte.edu
webauthprod.uncc.edu
treqss.uncc.edu
outage.charlotte.edu
irptableau02.uncc.edu

Certificate

The complete raw certificate details for riipen.charlotte.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84340065050472450171535145922181396309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of North Carolina at Charlotte'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'riipen.charlotte.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728021091361323603709949448534217639023593146051578626794925105257591947803156325053627389703742464561195571428084215583218464315806208030480909633981859242489469810363001732058259997992451318285765624145090168951417081946926633506026849961211057452654602178278370214038694333901577169520887200894112107463358926420744236909884527562295729357329236572078804291690549219648281757423599662566571380234336860219895435596608412808135706328647467271961179195365623934610280860114418212344505387615594822937580486834256692533813955791661887557485829313113275129474303228704714944525061225551837758209439096864514194935098726602783385050361928848708632214680331870532132243140289186630611481421274572793836097955743236129288856653089795772798892313278169438717521821364424431275277535525665511933239953803792891847662630314619071186123625668967407626720271761306464918852899677478430112520281947143751750331820227112825766188928201708960304045252678309136905555438609086340569585951336665273900402818420426003080177316146806886478035005316663894601359654626566283436078381545868699885408715938849583473807049444182488953488999438791892131498969120211693232209301599240970931832296867673735232646388125808063944650239307803526362430661432163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0795f727af5e412dd7a9acca8a52ec5b784ac7cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riipen.charlotte.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riipen.uncc.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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