NACproxy5.mtsu.edu

- Middle Tennessee State University -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:6f:52:bd:d4:e0:9c:ae:91:54:bd:c2:d3:3d:41:7b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Middle Tennessee State University

Organization: Middle Tennessee State University
Organization unit: ITD
State / Province: Tennessee
Locality: Murfreesboro
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:6f:52:bd:d4:e0:9c:ae:91:54:bd:c2:d3:3d:41:7b
Serial Number (int): 1907251144674857747701092680147485051
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 08:f7:4a:14:07:ba:83:82:83:ec:eb:59:04:8b:e9:3f:fc:ea:10:ab
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 3f:68:5c:b1:e8:09:fa:c2:f9:2f:7d:98:23:f7:64:b1:45:d6:aa:70
Fingerprint (sha256): 1e:38:07:b7:3a:f8:f6:9a:34:11:02:4b:7c:30:d4:ee:dc:d7:c8:6d:14:7e:29:9b:39:2d:b7:e2:bd:8e:de:bb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate NACproxy5.mtsu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for NACproxy5.mtsu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

NACproxy5.mtsu.edu

Other certificates including the domain name mtsu.edu

(limited to 100 certificates)
footprints.mtsu.edu
mobilenotifications.mtsu.edu
nacproxy1.mtsu.edu
webservices.mtsu.edu
matomo.walker.mtsu.edu
vendorappstest.mtsu.edu
pipeline.mtsu.edu
vdi-test-vpx.mtsu.edu
enterprise.network.mtsu.edu
shsweb.mtsu.edu
blueid.mtsu.edu
mtsu.edu
library.mtsu.edu
shsweb.mtsu.edu
eis.mtsu.edu
solarwindsorion.mtsu.edu
mobilenotifications.mtsu.edu
n001.offcampuspartners.com
shsapp3.mtsu.edu
nacproxy2.mtsu.edu
elearn.mtsu.edu
nacproxy5.mtsu.edu
edge-uc1.peopleadmin.com
www.mtsu.edu
mobilenotifications.mtsu.edu
pipelinetest.mtsu.edu
eistest.mtsu.edu
search.mtsu.edu
cherubim3.mtsu.edu
appstest.mtsu.edu
ssb.mtsu.edu
vdictrxlicense.mtsu.edu
libraryguides.mtsu.edu
inbtest.mtsu.edu
mba.mtsu.edu
ptsapp01.mtsu.edu
libanswers.mtsu.edu
stem2.mtsu.edu
NACproxy6.mtsu.edu
eLearn.mtsu.edu
stem2.mtsu.edu
fsaatlastest.mtsu.edu
vendorapps.mtsu.edu
mtsu32.mtsu.edu
n001.offcampuspartners.com
edge_uc4.peopleadmin.com
n001.offcampuspartners.com
cem02.mtsu.edu
edge_uc4.peopleadmin.com
stem2.mtsu.edu
shsapp3.mtsu.edu
recovery.mtsu.edu
oirweb.mtsu.edu
collbas.mtsu.edu
redcap.mtsu.edu
n001.offcampuspartners.com
collbas.mtsu.edu
*.cs.mtsu.edu
edge-uc1.peopleadmin.com
NACproxy4.mtsu.edu
vendorappstest.mtsu.edu
find.mtsu.edu
stem4.mtsu.edu
recportal.mtsu.edu
go.complete.mtsu.edu
nacproxy4.mtsu.edu
eprint02.mtsu.edu
theatrecheckout.mtsu.edu
NACproxy5.mtsu.edu
shsapp3.mtsu.edu
mba.mtsu.edu
recovery.mtsu.edu
edge-uc1.peopleadmin.com
campusrecweb02.mtsu.edu
onlineorientation.mtsu.edu
nacproxy6.mtsu.edu
owafs.mtsu.edu
appnav.mtsu.edu
matomo.walker.mtsu.edu
footprints.mtsu.edu
cherubim7.mtsu.edu
nacproxy4.mtsu.edu
nacproxy2.mtsu.edu
www.mtsu.edu
claritypool.mtsu.edu
mtsu32.mtsu.edu
nexus.mtsu.edu
tmstec4.mtsu.edu
SFBAccess.mtsu.edu
issmtest.mtsu.edu
ezproxy.mtsu.edu
businesslab.mtsu.edu
newsroom.mtsu.edu
capone.mtsu.edu
enterprise.network.mtsu.edu
webmail.mtsu.edu
nacproxy4.mtsu.edu
mtsu.edu
www.complete.mtsu.edu
nacproxy3.mtsu.edu

Certificate

The complete raw certificate details for NACproxy5.mtsu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXRfr0Yki96KmyO+yy1U
jFg73iQHSx8DRUyPam9jZjZMx/YhNu0aJGZ+4w0PIzDsStHqck5S+vTdzL7LSyU0
yqKGGFGRGMawfL9K+SIZF99m1n6v122Vl7O1x0YFgUG0BF1dvd17TRFZAOJy6ijn
DzuQfKMkzr8cA3pwz5lbCxqPENiREYYicd2YBkKCYBJiMZD6PivAgiAvGSnT4t0c
Jxf2mXfk7sqMGLjniS3rOB0VrWjlyRGl2jPZlweai66uJVIfSNk29MSjVAUxODQi
DNMgH7/AuZ6EECyxaYMc77TKdabQdhfJBg57/x+Ig1IZjAYTJkP9V29B/MqptKtr
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1907251144674857747701092680147485051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Murfreesboro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Middle Tennessee State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NACproxy5.mtsu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25431285342093679431820043255083846269480417416271837442185307304540959589814833537347591851662692327596712066732456563226427547844366453166991583210477388086839147423594922393989647382331751358604055714000305818606196940076316666915505669280897010006323138891614977691398104447967333327040197933041801274880164483548087488317129800511232503230730362588361933492701407776755079957908796121738972507311429652423390427645031380718717418382915950435866342305770368458790175704601948301560808723992950692897404923904376650210266906344440026889723453548395606483454466853838927215864001255134682491263714083706540810529583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08f74a1407ba838283eceb59048be93ffcea10ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NACproxy5.mtsu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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