primordial.clinical.bcm.edu

- Baylor College of Medicine -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number 4e:d4:04:9c:d7:3f:38:21:bf:67:4f:07:06:92:11:b7 was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Baylor College of Medicine

Organization: Baylor College of Medicine
State / Province: Texas
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 4e:d4:04:9c:d7:3f:38:21:bf:67:4f:07:06:92:11:b7
Serial Number (int): 104780644161080292888946362127343554999
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2a:45:84:03:86:f9:68:67:34:6b:d2:95:f4:69:74:74:72:9c:f7:88
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 3e:67:19:2f:59:8f:b3:c6:ae:e0:c0:e9:66:f7:3d:1c:a4:bc:d9:09
Fingerprint (sha256): 10:04:c3:69:e5:9a:b4:45:7d:2a:2b:06:0b:ea:a8:8a:2b:0a:b8:8b:4e:f1:d9:f2:d5:26:b4:a6:99:00:ff:11

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate primordial.clinical.bcm.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for primordial.clinical.bcm.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

primordial.clinical.bcm.edu

Other certificates including the domain name bcm.edu

(limited to 100 certificates)
forms.bcm.edu
sapintportal.bcm.edu
intranet-calendar.bcm.edu
semaphore-qa.bcm.edu
alphaphinetwork.com
bcmess.bcm.edu
connect.bcm.edu
webmail.hnl.bcm.edu
vpn.bcm.edu
lyncfepool1.bcm.edu
redcap.research.bcm.edu
acsconnects.org
docuware.admin.bcm.edu
password.bcm.edu
cvd.hgsc.bcm.edu
aceconnection.org
aatlconnected.com
media.bcm.edu
hgsc-hcp-aw.hgsc.bcm.edu
pwss.bcm.tmc.edu
vpn01.bcm.edu
tst-slicerdicer.clinical.bcm.edu
anscsp.research.bcm.edu
myappsdev.bcm.edu
alumniucsh.com
sigauth.bcm.edu
evault.bcm.edu
oncoredev.dldcc.bcm.edu
deku.dldcc.bcm.edu
www.bcm.edu
connect.bcm.edu
cryoemdb.bcm.edu
mychart.bcm.edu
cams.bcm.edu
pdxportal-stg.dldcc.bcm.edu
aceconnection.org
blake.bcm.edu
biobank.research.bcm.edu
www.hgsc.bcm.edu
fmog.bcm.edu
tcrbbiobank.research.bcm.edu
tls.automattic.com
aatlconnected.com
epa-safegx0-p01.ad.bcm.edu
ictr-qa.research.bcm.edu
sug-angus.hgsc.bcm.edu
careeverywhere.bcm.edu
vpn02.bcm.edu
mychart.bcm.edu
epicapps.bcm.edu
vpn01.bcm.edu
mobid.analytics.bcm.edu
claimsmanager-dev.clinical.bcm.edu
collaborate.bcm.edu
mhgretreat.research.bcm.edu
cpd.education.bcm.edu
ahlafoundationconnect.com
cas.research.bcm.edu
mobi.analytics.bcm.edu
ecw-calabrio-p01.bcm.edu
progeny-fhq-dev.dldcc.bcm.edu
tls.automattic.com
apps.bcm.edu
vpn02.bcm.edu
tls.automattic.com
tls.automattic.com
iron-ea.bcm.edu
oncoredev.dldcc.bcm.edu
hgsc-vmweb-08.hgsc.bcm.edu
ahlafoundationconnect.com
halo-esxi.lssbc.bcm.edu
careeverywhere.bcm.edu
primordial.clinical.bcm.edu
igap.research.bcm.edu
connect.bcm.edu
connect.bcm.edu
biobank.research.bcm.edu
oncore-stg.dldcc.bcm.edu
sharepoint.bcm.edu
hsweb-trn.clincal.bcm.edu
dev-slicerdicer.clinical.bcm.edu
ecl-uprint-p01.ad.bcm.edu
tls.automattic.com
mediasrc.bcm.edu
tls.automattic.com
metrics.apps.bcm.edu
fmog-qa.bcm.edu
access.fortefoundation.org
cams.bcm.edu
brain.bcm.edu
nadcdev.bcm.edu
mhgretreat.research.bcm.edu
primordial.clinical.bcm.edu
ictr-dev.research.bcm.edu
acquire2-cats-stg.research.bcm.edu
epicapps-dev.bcm.edu
myappsdev.bcm.edu
cas.research.bcm.edu
aatlconnected.com
oncore-dev.dldcc.bcm.edu

Certificate

The complete raw certificate details for primordial.clinical.bcm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOqQcDnNEpqiwO611TGo
XJUkJdC6cGsoAugc9tyeeD4zmR4mD36LEhEJcfFzKn3Cu7jN35dQkKWUsqwtB80M
UPimCJfTXXjwdztuvdi3vYNjeb2EXg2y6xhCD76aTX+1xvzYAPCKI8b8N/LLMO8+
zmvrdLuGyh2Pr1+PxsWlv9F6nJ27IHsX5hKyPTOdeiXnacMfgp6Rel9EtC+/dxbR
M+9XDM1KU66lZrGGsskLwYuSBjJq//iLtfyUQp4KwL9xc2jYqanAWoEBXb96i8U0
ogDmQp+Km9B8hDJlLUUOxZbNOdOgabvdhCRW8JgLdhnC9c2gm0g9IqyI2V8BeiGB
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104780644161080292888946362127343554999
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baylor College of Medicine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'primordial.clinical.bcm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25363328917363324283529814073421226041038376744779040564657757625058425916562659052953184693627597391528758982577482096837377388713417602530013019450262830695908825272283010854892109904105027771073974661023925926930020438270933459820062676384780795499292259014742999836352182397801392703461850525050039704492816723538156969760856135449760720573914138963692553884829397043173649531049081943143735003099909924914936157062236703018044659985817621246564627237299442550681294342071976674962306486834407638711836839885050619495465832546466108541938922179527400276940810519519118206457685630617972742262414372527137311785351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a45840386f96867346bd295f4697474729cf788
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primordial.clinical.bcm.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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