CP-7942G-SEP689CE2E782D3

- Cisco Systems Inc. -

Issued by Cisco Manufacturing CA

About this certificate

This digital certificate with serial number 3e:99:7a:c4:00:00:00:33:1d:8b was issued on by Cisco Systems.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types (BRs: 7.1.4.2.1)
  • URIs in SAN extension must have a scheme and scheme specific part (RFC5280: 4.2.1.6)
  • URIs that include an authority ([RFC3986], Section 3.2) MUST include a fully qualified domain name or IP address as the host (RFC 5280: 4.2.1.7)
  • When the subjectAlternateName extension is present and a URI is used, the name MUST NOT be a relative URI (RFC 5280: 4.2.1.6)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
  • Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)

Cisco Systems Inc.

Organization: Cisco Systems Inc.
Organization unit: EVVBU

Cisco Systems

Organization: Cisco Systems

This certificate will expire on

Certificate Details

Serial Number (hex): 3e:99:7a:c4:00:00:00:33:1d:8b
Serial Number (int): 295617919976763630493067
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 5e:dc:7f:55:18:43:10:66:97:a7:76:4f:5d:b2:4d:c7:8c:49:67:02
AuthorityKeyId: d0:c5:22:26:ab:4f:46:60:ec:ae:05:91:c7:dc:5a:d1:b0:47:f7:6c

Fingerprint (sha1): 62:c9:76:d9:d7:85:2f:f1:62:3a:62:aa:aa:55:b9:9b:04:47:f3:fc
Fingerprint (sha256): 25:00:a3:20:6e:7c:fa:c3:60:9b:48:ca:ac:3d:d0:ad:53:99:d8:d0:d1:76:f9:22:a9:42:96:ab:8b:4a:98:fe

Issuing Certificate URL: http://www.cisco.com/security/pki/certs/cmca.cer

Revocation information

CRL Distribution Point: http://www.cisco.com/security/pki/crl/cmca.crl

Check the revocation status for certificate CP-7942G-SEP689CE2E782D3

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for CP-7942G-SEP689CE2E782D3

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication
IPSEC End System

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for CP-7942G-SEP689CE2E782D3 in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX+3zslmJcVPp4LCDCBF
6PBdU/VezLl9aeh6Pfog3QBdXUgTH8ZZ/7AQrFaaFz0Ao/Ldssnld9l0BAKeU/d3
RV2pXGQFQHS0kYtV03jRYgNyXFt66q+4aOzvTPQXYPfc3vAHAA2K6Agv4AZiDwis
f95kBjyZ6KwA/ymzp6FMoKbdxVn8SbpKw430Tv3udfgortyvY5uY8EGvSLu5MNag
8qMXw5Ava+QezH59i+cL3vGqjLh0pyZQ2fIB/v/YSFMbL5hDbHmg9gZqwbkKmNnV
P8pfOWma/MvE3d0EGCN1J1Hibbb2l6dAU7CZcxUoR8M27qeQNC7xW+Q6poDOeu2t
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295617919976763630493067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Manufacturing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-29 02:28:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-29 02:38:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Systems Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EVVBU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CP-7942G-SEP689CE2E782D3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18872487532581816886401988363448882378801737124927515533116816083723731095121654429697915990157211797356880422063118581187929767109427240055572281762648484890289178750702112364326534249344531564397530712006744818234907180465655309179883793517766503463886349573748430471031065768816095553414858926279510054170746883675483621503788645854679032993109933124902368159270752489600125351236919509923896655315918427598918713986580487191536047425109787307717508767224739740708664074993190804739940068980852727645834014732353734502360336839446034300610731683385953994451024440465085101529783899169757962549786314269684071771403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.5 (ipsecEndSystem)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'CP-7942G-SEP689CE2E782D3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5edc7f551843106697a7764f5db24dc78c496702
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d0c52226ab4f4660ecae0591c7dc5ad1b047f76c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.cisco.com/security/pki/crl/cmca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.cisco.com/security/pki/certs/cmca.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2 (enrollCerttypeExtension)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 73 0 80 0 83 0 69 0 67 0 73 0 110 0 116 0 101 0 114 0 109 0 101 0 100 0 105 0 97 0 116 0 101 0 79 0 102 0 102 0 108 0 105 0 110 0 101]
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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