munki.ito.umt.edu

- University of Montana -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number ec:52:ef:2d:e7:ef:ee:0b:90:d3:8a:c6:1f:3f:55:b6 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Montana

Organization: University of Montana
State / Province: Montana
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ec:52:ef:2d:e7:ef:ee:0b:90:d3:8a:c6:1f:3f:55:b6
Serial Number (int): 314128426480583682438156034407317591478
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ec:e2:cf:dc:d2:8a:ff:2c:ee:55:07:5f:e2:a9:0b:52:a1:dc:3f:57
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): b4:0c:1d:7c:4b:03:25:83:15:28:09:d7:d3:10:98:3b:b3:24:8d:b2
Fingerprint (sha256): 16:05:96:f3:68:f3:28:f4:c3:a3:f8:1f:35:7e:f8:9c:21:70:8e:a5:d8:56:3a:32:0f:9c:29:e6:03:98:ad:b5

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate munki.ito.umt.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for munki.ito.umt.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

munki.ito.umt.edu

Other certificates including the domain name umt.edu

(limited to 100 certificates)
moodlerooms.com
umnews.jour.umt.edu
waterproductionconnections.hs.umt.edu
5689640350646272-fe1.pantheonsite.io
*.jour.umt.edu
blackboardopenlms.com
services.cfc.umt.edu
topofire.dbs.umt.edu
scholarship.law.umt.edu
flbs.umt.edu
5689640350646272-fe1.pantheonsite.io
allosaurus.ito.umt.edu
webprocess.umt.edu
moodlerooms.com
fcfc-mcoapps.cfc.umt.edu
bp40.found.umt.edu
5689640350646272-fe1.pantheonsite.io
montanan.umt.edu
hsapp.hs.umt.edu
5689640350646272-fe1.pantheonsite.io
vpn1.usfs-i2.umt.edu
www.umt.edu
*.jour.umt.edu
5689640350646272-fe1.pantheonsite.io
cyberbear.umt.edu
5689640350646272-fe1.pantheonsite.io
staging.cdn.umt.edu
staging.etran.dcc.umt.edu
appstest.umt.edu
moodlerooms.com
moodlerooms.com
libguides.lib.umt.edu
inbtest.umt.edu
5689640350646272-fe1.pantheonsite.io
www6.facs.umt.edu
moodlerooms.com
moodlerooms.com
adfs.umconnect.umt.edu
moodlerooms.com
util.umt.edu
mcewww.cec.umt.edu
scholarworks.umt.edu
waterproductionconnections.hs.umt.edu
moodlerooms.com
mc.umt.edu
*.coursedog.com
scholarship.law.umt.edu
5689640350646272-fe1.pantheonsite.io
rocker.umt.edu
messaging.umt.edu
ssbtest11.umt.edu
cphrgeo.health.umt.edu
staging.ssb.mcc.umt.edu
life.umt.edu
staging.ban.dcc.umt.edu
*.health.umt.edu
zcloud.ito.umt.edu
*.facs.umt.edu
banmidxet.umt.edu
login.umt.edu
report.munki.ito.umt.edu
messaging.umt.edu
www.umt.edu
mystuff.sa.umt.edu
collab-edge.telecom.umt.edu
moodlerooms.com
flbs-rap1.flbs.umt.edu
investigations.jour.umt.edu
tableau.umt.edu
currents.cfc.umt.edu
forms.lib.umt.edu
5689640350646272-fe1.pantheonsite.io
bp40.found.umt.edu
keys.mps.umt.edu
blackboardopenlms.com
waterproductionconnections.hs.umt.edu
libguides.lib.umt.edu
gbbmediasitec.business.umt.edu
scholarship.law.umt.edu
flbs-rap1.flbs.umt.edu
bp16.found.umt.edu
camtasia.umt.edu
munki.ito.umt.edu
hcmt.umt.edu
cuc-pub-ms.telecom.umt.edu
mtprdbw.tc.umt.edu
hswebworkt.math.umt.edu
docs.umt.edu
libguides.lib.umt.edu
portal.facs.umt.edu
scholarworks.umt.edu
mceweb.cec.umt.edu
coursetest.umt.edu
*.coursedog.com
docs.umt.edu
moodlerooms.com
winapps.umt.edu
flbs.umt.edu
inbtest.umt.edu
northernexposure.umt.edu

Certificate

The complete raw certificate details for munki.ito.umt.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314128426480583682438156034407317591478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Montana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'munki.ito.umt.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 647333686531291778372015777742690354124573196123126789937065946685039214641488405590226396975926536437212575116479030783168943310071004230856691987374025201989779382817916377541013076661822420046406876645182759275479644942616585645377938439582197957675407329615947821631222077524578860701796352930417739372275581594906238967515599552838292808258341018633672661861007629608745663563904268383660050870531013440791341089886519812766685015313232100408097104872624455282183607351670793230253580758562688788254159281177808332447923883719151030825652627279789097695569381611938458609096866463120257194051446767186887027960646511854214912723693072107602827706009698944628100008725590811629752386900406771057525744475370985417506040052976423065171435379582071470884579928260104491393239995417980694528025662460365138926595485667781744954880781756094841566790660470195518482072689922004864371635688589389218428552434179574832118603985534540992848043907047534116072404095848106468842116275130688993066082475245330750908109186725574032590925049992406920788512208858978699779459342228149702533027667636200127590739923911150236517357594214527916006171387249206964048470644752855412459590873138651167996950656640354392877488621343888655196882565489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ece2cfdcd28aff2cee55075fe2a90b52a1dc3f57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munki.ito.umt.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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