cac.cas.usuhs.edu

- U.S. Government -

Issued by DOD CA-27

About this certificate

This digital certificate with serial number 02:75:c4 was issued on by U.S. Government.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • SAN DNSName contains duplicate values (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: TMA
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:75:c4
Serial Number (int): 161220
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 68:4e:15:10:22:44:b8:d8:49:e3:47:c9:60:a6:15:cc:2b:e0:81:b3
AuthorityKeyId: 1b:04:04:40:45:5e:7d:2b:5e:0b:cc:99:65:4d:f3:a4:de:90:77:17

Fingerprint (sha1): 1f:b9:aa:fb:86:be:bd:43:09:ac:7e:74:7d:73:58:e4:cf:0e:12:f5
Fingerprint (sha256): 0d:d5:d1:c3:9e:74:01:8c:2a:03:84:d9:e8:93:a3:8c:ce:e5:19:ff:2b:e1:28:f8:91:07:54:41:f8:52:09:29

Issuing Certificate URL: http://crl.disa.mil/sign/DODCA_27.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODCA_27.crl
CRL Distribution Point: ldap://crl.gds.disa.mil/cn%3dDOD%20CA-27%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary

Check the revocation status for certificate cac.cas.usuhs.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cac.cas.usuhs.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cac.cas.usuhs.edu
cac.cas.usuhs.edu
cas.usuhs.edu

Other certificates including the domain name usuhs.edu

(limited to 100 certificates)
www.usuhs.edu
usuasoexweb2.usuhs.edu
www.lrc.usuhs.edu
puppetmaster.usuhs.edu
my.usuhs.edu
CUP-MC-CPC1-PUB.usuhs.edu
www.usuhs.edu
portfolio.usuhs.edu
echo-ess.usuhs.edu
usuhs-vh-03.usuhs.edu
carlosdev.usuhs.edu
er.lrc.usuhs.edu
desxi28.usuhs.edu
usuhs-vdi-03.usuhs.edu
scholar.usuhs.edu
drupal-centers.usuhs.edu
stage-fac-dev.usuhs.edu
CUCM-MC-CPC1-TFTP-01.USUHS.EDU
mneat.usuhs.edu
usuhs-vdi-01.usuhs.edu
lmsdev.usuhs.edu
desxi32.usuhs.edu
stage-sakai.usuhs.edu
news.usuhs.edu
www.usuhs.edu
eduapp1.usuhs.edu
usuimpact.usuhs.edu
usuasodevweb.usuhs.edu
stage-fac-dev.usuhs.edu
stage-redcap.usuhs.edu
ususecureauth2.usuhs.edu
caslocator.usuhs.edu
usu-awx.usuhs.edu
slides.usuhs.edu
canvas.usuhs.edu
eduapp2.usuhs.edu
usu-conn-srv-02.usuhs.edu
desxi29.usuhs.edu
usuexweb2.usuhs.edu
usuasostage.usuhs.edu
lrc2.usuhs.edu
CUCM-MC-CPC1-TFTP-01.USUHS.EDU
cas.usuhs.edu
slides.usuhs.edu
usuhs-voip-02n.usuhs.edu
content.usuhs.edu
cfapps.usuhs.edu
kcoeus.usuhs.edu
usuasoweb.usuhs.edu
servicenow.usuhs.edu
panopto.usuhs.edu
dental.usuhs.edu
im.usuhs.edu
lb.usuhs.edu
doc.lrc.usuhs.edu
usuexweb1.usuhs.edu
usuasoexweb2.usuhs.edu
usuasostage.usuhs.edu
certificates.usuhs.edu
usuasoexweb2.usuhs.edu
pathslide1.usuhs.edu
*.lrc29.usuhs.edu
usuexweb1.usuhs.edu
usuasodevweb.usuhs.edu
eduapp2.usuhs.edu
usuhs-voip-04a.usuhs.edu
www.usuhs.edu
erdev.lrc.usuhs.edu
cac.cas.usuhs.edu
ususolarwinds.usuhs.edu
mta-sts.usuhs.edu
usuhs-biz.usuhs.edu
usuasoexweb2.usuhs.edu
CER-MC-CPC1-SUB.USUHS.EDU
iwcp.usuhs.edu
*.lrc28.usuhs.edu
usuexweb1.usuhs.edu
cf2.usuhs.edu
usuaperio1.usuhs.edu
CUP-MC-CPC1-PUB.usuhs.edu
epicc.usuhs.edu
my.usuhs.edu
redcap.usuhs.edu
epicc.usuhs.edu
www.lrc.usuhs.edu
usuasoexweb1.usuhs.edu
usuhs-vh-01.usuhs.edu
stage-sakai.usuhs.edu
usuexweb2.usuhs.edu
maintenance.lrc.usuhs.edu
er.lrc.usuhs.edu
www.usuhs.edu
apps.usuhs.edu
content.usuhs.edu
usuehshpserver.usuhs.edu
stage-drupal-centers.usuhs.edu
foreman.usuhs.edu
lrc-web.usuhs.edu
ncdmph.usuhs.edu
RCS28.lrc.usuhs.edu

Certificate

The complete raw certificate details for cac.cas.usuhs.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vb7IfhJ6X6s+SRflAFb
/ZRCLVQZNEwrfXUsveuuxzxDLysdKhD8LpULII7pbfCsKuHQXSKmD2utuMWVZS94
sWytp+OmpAm4NrDg/FrnXNj9+UyvhqwUzUlW36VmdVpgjBgYdWvlNTJZzoLJAKBi
Bxh5CeFpNIodRdimN4LH1M7ROl5UZqn4/FTPUsqS4Q39usF9iarQ3bm3sDqVQ3I3
/xs3zhm9sxcevGRJfBy5Lv3x48pUWNSdPqUb/GDXIjhdbdsJ3TO7/KlQQJxuXjkU
veW6UXZnmPZ97Nqqgdd1/3sZp4eyD8VG89HuyXcgF6fcEIZtaiukmxuIGo5yseTX
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD CA-27'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-16 15:31:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-08 15:50:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TMA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cac.cas.usuhs.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27436604100972280536102812416194418127669008771047615848740104520314951433558303475766391581962582095707258790323230808515225365969804605957466160577598513142401061417212913858795410375687546035746522072247971863958139768309557968337504737907021209954556113425775367488904200491401548633376515418312199147369873165708366422413813037510946244124368051617623256414149572225021879703829171339076919478476672821789173871284455397256383231898081808801704142340344233519163518348262208381371678317965651174493957131958082064110589625479495030583805583194731737596485687255796788990431462599555906264610470912026096420837369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b040440455e7d2b5e0bcc99654df3a4de907717
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							684e15102244b8d849e347c960a615cc2be081b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODCA_27.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODCA_27.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://crl.gds.disa.mil/cn%3dDOD%20CA-27%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cac.cas.usuhs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cac.cas.usuhs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.usuhs.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.5 (usDODClass3)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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